Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/03/18 2:0 p.m.33 views

CVE-2024-2594 Cross-Site Scripting (XSS) in AMSS++

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/admin/index.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an...

7.1CVSS6.4AI score0.00411EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/18 2:0 p.m.64 views

CVE-2024-2594

AMSS++ 4.31 is affected by a Cross-Site Scripting (XSS) vulnerability due to insufficient encoding of user-controlled input in multiple parameters on /amssplus/admin/index.php. Root cause: input is not properly encoded, enabling a remote attacker to craft a URL that, when visited by an authentica...

7.1CVSS6.3AI score0.00411EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/18 2:0 p.m.16 views

CVE-2024-2594 Cross-Site Scripting (XSS) in AMSS++

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/admin/index.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an...

7.1CVSS5.9AI score0.00411EPSS
SaveExploits0References1
Rows per page
Query Builder