4 matches found
CVE-2024-37763
MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...
5.4CVSS0.00672EPSS
SaveExploits1References1
CVE-2024-37763
MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...
6.1AI score0.00672EPSS
SaveExploits1References1
CVE-2024-37763
MachForm versions up to v19 are vulnerable to an unauthenticated stored cross-site scripting (XSS) flaw. The root cause is a lack of input sanitization in the body of a POST request when using a form with the text signature enabled. A malicious payload can be injected into dynamic parameters such...
5.4CVSS6.3AI score0.00672EPSS
SaveExploits1References1Affected Software1
20