Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 8:57 a.m.•16 views

CVE-2024-22855

A cross-site scripting XSS vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

5.4CVSS6.3AI score0.0033EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/06/12 5:15 p.m.•14 views

CVE-2024-22855

A cross-site scripting XSS vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

5.4CVSS6.2AI score0.0033EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•8 views

CVE-2024-22855: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

5.4CVSS6.3AI score0.0033EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•16 views

ITSS iMLog Cross-Site Scripting Vulnerability

ITSS iMLog is a centralized monitoring tool from ITSS Corporation. A cross-site scripting vulnerability exists in ITSS iMLog prior to v1.308, which stems from a cross-site scripting vulnerability in the User Maintenance section that allows an attacker to inject a crafted payload to execute...

5.4CVSS6.2AI score0.0033EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/06/12 12:00 a.m.•18 views

CVE-2024-22855

A cross-site scripting XSS vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

6.2AI score0.0033EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/12 12:00 a.m.•69 views

CVE-2024-22855

CVE-2024-22855 affects ITSS iMLog v1.307 in the User Maintenance section. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to inject a crafted payload into the Last Name parameter, enabling arbitrary web scripts or HTML execution. The issue stems from input handling ...

5.4CVSS6.2AI score0.0033EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/06/12 12:00 a.m.•39 views

CVE-2024-22855

A cross-site scripting XSS vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

0.0033EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/05/31 12:00 a.m.•232 views

iMLog Cross Site Scripting

Exploit Title: iMLog "User Maintenance" 3. Click on "Search" and then select your UserID. 4. Change the "Last Name" input to 5. Click on "Save" 6. Refresh the page, XSS will be triggered...

7.4AI score
SaveExploits0
Rows per page
Query Builder