CVE-2024-34749

2024-05-1308:17:14

jpcert

www.cve.org

phormer

version 3.35

cross-site scripting

remote unauthenticated attacker

arbitrary script

web browser

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user.

CNA Affected

[
  {
    "vendor": "Aidin",
    "product": "Phormer",
    "versions": [
      {
        "version": "prior to version 3.35",
        "status": "affected"
      }
    ]
  }
]