CVE-2024-35180 — OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter that can be passed to various OMERO.web endpoints that have JS — CVE Database · The Intelligence Room