CVE-2024-50659

A Cross-Site Scripting (XSS) vulnerability exists in iPublish Media Solutions AdPortal version 3.0.39 . This flaw allows a remote attacker to escalate privileges by exploiting the shippingAsBilling parameter within the updateuserinfo.html endpoint. While no official patch is currently documented,...