Lucene search

K
cvelistMitreCVELIST:CVE-2024-29273
HistoryMar 22, 2024 - 12:00 a.m.

CVE-2024-29273

2024-03-2200:00:00
mitre
www.cve.org
cve-2024-29273
cross-site scripting
svg document
uploadfile vulnerability

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVELIST:CVE-2024-29273