CVE-2024-40507

CVE-2024-40507 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMPersonnel.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMPersonnel.asmx function. Vulnerable Product...