JiaSheng He
JiaSheng He
The vulnerability occurs on line 308 of config/i18n/en/main.php. The APP_HOST originating from the cookie was directly referenced into the page by% s without entity encoding.
Hello, this vulnerability may not exist as an SSRF vulnerability. Based on your description, there may be attackers using the Pingback module to cause DoS or DDoS attacks on other...
I'm glad this issue will be fixed in 1.7.5, thanks to VvvebJs team for maintaining the project!
This means that this issue will be fixed in 1.7.5, thanks to these developers at Vvveb team for their attention!
This is the vulnerability exploitation reference for CVE-2024-29275
CVE-2025-7453