Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•2 views

CVE-2024-8473: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

6.3CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•1 views

PT-2024-39040

Name of the Vulnerable Software and Affected Versions: Jobportal versions affected versions not specified Description: A Cross-Site Scripting XSS issue exists due to insufficient encryption of user-controlled input. This could allow an attacker to retrieve the session details of an authenticated...

6.3CVSS0.00278EPSS
SaveExploits0References7
Rows per page
Query Builder