CVE-2024-50677

A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

CVE-2024-50677

creationtimestamp| type| source ---|---|--- 2024-12-06 01:09:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9321 2024-12-06 16:13:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113606761912707262 2024-12-06 18:08:02+00:00| seen| https://t.me/cvedetector/12241...

CVE-2024-50677

OroPlatform CMS v5.1 is vulnerable to a two-click reflected XSS vulnerability due to improper neutralization of user input in the Search parameter. An attacker can craft a malicious link containing a JavaScript payload; if a victim clicks the link and subsequently interacts with the search bar, t...

CVE-2024-50677

A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

CVE-2024-50677

A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...