EUVD-2024-43419

Malicious code in bioql PyPI...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392

CVE-2024-49392 is an XSS vulnerability in Acronis Cyber Files for Windows prior to build 9.0.0x24, disclosed via PT-2024-33504 and corroborated by other sources. The issue occurs on the enrollment invitation page, allowing stored XSS through injected scripts. Affected product: Acronis Cyber Files...

PT-2024-33504 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions before 9.0.0x24 Description: A stored cross-site scripting XSS issue exists on the enrollment invitation page. This allows an attacker to inject malicious scripts into the page, potentially leading to...