Lucene search

K
cvelistMitreCVELIST:CVE-2024-26472
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2024-26472

2024-02-2700:00:00
mitre
www.cve.org
2
klik socialmediawebsite
reflected cross-site scripting
remote attackers
web browser
malicious payload
create-new-pwd.php

AI Score

6.1

Confidence

High

EPSS

0

Percentile

9.0%

KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the ‘selector’ or ‘validator’ parameters of ‘create-new-pwd.php’.

AI Score

6.1

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-26472