# CVEs published 2024-07-07

4 CVEs were published on July 7, 2024: 0 critical, 0 high. Days are UTC.

- [CVE-2024-6539](https://cve.now/CVE-2024-6539.md): heyewei SpringBootCMS Guestbook guestbook cross site scripting (CVSS 5.3, heyewei SpringBootCMS)
- [CVE-2024-3651](https://cve.now/CVE-2024-3651.md): Denial of Service via Quadratic Complexity in kjd/idna (CVSS 6.2, kjd/idna · idna)
- [CVE-2024-6229](https://cve.now/CVE-2024-6229.md): Stored XSS in stangirard/quivr (CVSS 6.8, stangirard/quivr)
- [CVE-2024-40614](https://cve.now/CVE-2024-40614.md): EGroupware before 23.1.20240624 mishandles an ORDER BY clause. (CVSS 6.5, egroupware/egroupware)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-07-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.