CVE-2024-45962

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting XSS attack or execute arbitrary code via a crafted JavaScript to the target...

Cross-Site Scripting (XSS)

jsuites is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in the Editor function of jsuites.js, which allows an attacker to inject and execute arbitrary JavaScript...