4 matches found
CVE-2024-54451
A cross-site scripting XSS vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15 allows remote attackers authenticated as system administrators to inject arbitrary web script or HTML via the...
CVE-2024-54451
The Kurmi Provisioning Suite is vulnerable to a cross-site scripting (XSS) flaw in the graphicCustomization.do page. This vulnerability allows remote attackers, authenticated as system administrators , to inject arbitrary web scripts or HTML via the COMPONENT_fields(htmlTitle) field. If a super-a...
CVE-2024-54451
A cross-site scripting XSS vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15 allows remote attackers authenticated as system administrators to inject arbitrary web script or HTML via the...
CVE-2024-54451
A cross-site scripting XSS vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15 allows remote attackers authenticated as system administrators to inject arbitrary web script or HTML via the...