Lucene search

K
cvelistMitreCVELIST:CVE-2024-42939
HistoryAug 21, 2024 - 12:00 a.m.

CVE-2024-42939

2024-08-2100:00:00
mitre
www.cve.org
cve-2024-42939
cross-site scripting
yzncms v1.4.2
arbitrary web scripts
html
crafted payload
configured remarks text field

EPSS

0

Percentile

14.7%

A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the configured remarks text field.

EPSS

0

Percentile

14.7%

Related for CVELIST:CVE-2024-42939