CVE-2024-42834

Exploit-Titel: INCOGNITO SAC GESPEICHERTE CROSS-SITE-SCRIPTING XSS SCHWACHSTELLE Datum: 26. JULI 2024 Exploit-Autor: Etienne Supra Hersteller-Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Der Hersteller wurde informiert und hat die...

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...