Lucene search
HistoryMay 21, 2024 - 4:15 p.m.
CVE-2024-31847
italtel embrace
xss vulnerability
remote attackers
stored user input
5.7 Medium
AI Score
Confidence
High
An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization.
