Lucene search

K
nvd[email protected]NVD:CVE-2024-29273
HistoryMar 22, 2024 - 4:15 a.m.

CVE-2024-29273

2024-03-2204:15:11
web.nvd.nist.gov
cve-2024-29273
uploadfile vulnerability
index.php
svg document
information security

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for NVD:CVE-2024-29273