CVE-2024-56882

Sage DPW before 202412000 is vulnerable to Cross Site Scripting XSS. Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with...

PT-2025-6727

Name of the Vulnerable Software and Affected Versions Sage DPW versions prior to 2024 12 000 Description The issue allows low-privileged Sage users with employee role privileges to permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for...

CVE-2024-56882: Improper Neutralization of Input During Web Page Generation

Sage DPW before 202412000 is vulnerable to Cross Site Scripting XSS. Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with...