Lucene search

K
nvd[email protected]NVD:CVE-2024-27719
HistoryMar 28, 2024 - 7:15 p.m.

CVE-2024-27719

2024-03-2819:15:48
CWE-79
web.nvd.nist.gov
1
cross site scripting
faq management system
remote attacker
sensitive information

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

9.0%

A cross site scripting (XSS) vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-27719