3 matches found
CVE-2024-3794: Improper Neutralization of Input During Web Page Generation
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/AdvancedSystem, description field, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data...
4.8CVSS6AI score0.0038EPSS
SaveExploits0References1
20