A vulnerability classified as problematic has been found in Kanboard up to 1.2.40. Affected is an unknown function of the component Setting Handler. The manipulation of the argument application_language/application_date_format/application_timezone/application_time_format leads to basic cross site scripting.
This vulnerability is traded as CVE-2024-54001. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
