CVE-2024-34749

2024-05-1415:39:32

[email protected]

web.nvd.nist.gov

phormer

version 3.34

xss

vulnerability

exploit

remote attacker

arbitrary script

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user.

Affected configurations

Vulners

Node

aidinphormerRange<3.35

CNA Affected

[
  {
    "vendor": "Aidin",
    "product": "Phormer",
    "versions": [
      {
        "version": "prior to version 3.35",
        "status": "affected"
      }
    ]
  }
]