8 matches found
CVE-2024-50677
CVE-2024-50677 | Two-Click Reflected XSS in OroPlatform CMS v5.1 This repository presents a proof-of-concept of CVE-2024-50677 Disclaimer: This code is a proof of concept of the vulnerability. I will not be held responsible for any use of this exploit. Description: CVE-2024-50677 refers to a...
CVE-2024-50677
A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...
CVE-2024-50677
A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...
PT-2024-34389 · Oro · Oroplatform Cms
Name of the Vulnerable Software and Affected Versions: OroPlatform CMS version 5.1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. This enables attackers to potentially manipulate...
CVE-2024-50677: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...
CVE-2024-50677
OroPlatform CMS v5.1 is vulnerable to a two-click reflected XSS vulnerability due to improper neutralization of user input in the Search parameter. An attacker can craft a malicious link containing a JavaScript payload; if a victim clicks the link and subsequently interacts with the search bar, t...
