CVE-2024-35504

A cross-site scripting XSS vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL:errorname parameter after a failed login attempt...

CVE-2024-35504

A cross-site scripting (XSS ) vulnerability exists in the login page of FineSoft v8.0 . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the errorname URL parameter following a failed login attempt. To mitigate this risk until a formal fix is released, it ...