Lucene search

CVE-2024-11021

🗓️ 11 Nov 2024 08:04:15Reported by twcertType

Webopac from Grand Vice info has Stored Cross-site Scripting vulnerability. Remote attackers with regular privileges can inject arbitrary JavaScript code into the server. When users visit the compromised page, the code is automatically executed in their browser

Reporter	Title	Published	Views	Family All 3
NVD	CVE-2024-11021	11 Nov 202408:15	–	nvd
Cvelist	CVE-2024-11021 Grand Vice info Webopac - Stored XSS	11 Nov 202407:24	–	cvelist
Vulnrichment	CVE-2024-11021 Grand Vice info Webopac - Stored XSS	11 Nov 202407:24	–	vulnrichment

Nvd

Node

vice webopacRange6–6.5.1

vice webopacRange7–7.2.3

[
  {
    "defaultStatus": "unaffected",
    "product": "Webopac",
    "vendor": "Grand Vice info",
    "versions": [
      {
        "lessThan": "6.5.3",
        "status": "affected",
        "version": "6",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.1",
        "status": "affected",
        "version": "7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
twcert	www.twcert.org.tw/tw/cp-132-8219-f12d0-1.html
twcert	www.twcert.org.tw/en/cp-139-8220-e75c2-2.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Nov 2024 08:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4

EPSS0.0004

SSVC

CWE-79