CVE-2024-40347

A reflected cross-site scripting XSS vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid...

PT-2024-28816 · Hyland · Hyland Alfresco Platform

Name of the Vulnerable Software and Affected Versions: Hyland Alfresco Platform version 23.2.1-r96 Description: A reflected cross-site scripting XSS issue allows attackers to execute arbitrary code in the context of a user's browser by injecting a crafted payload into the htmlid parameter...