PT-2024-20304

Name of the Vulnerable Software and Affected Versions MRCMS version 3.0 Description The issue is a Cross-Site Scripting XSS vulnerability. It can be exploited via the /admin/system/saveinfo.do API endpoint. Recommendations For MRCMS version 3.0, consider restricting access to the...