CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

A Cross-Site Scripting (XSS) vulnerability exists in the Webasyst v.2.9.9 open source PHP framework. A remote attacker can exploit the Instant messenger field within the Contact info function to execute arbitrary code . No specific remediation steps or exploit links are provided in the documents.