CVE-2024-50800

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

CVE-2024-50800

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

CVE-2024-50800: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

PT-2024-34411 · Unknown · M2000 Smart4Web

Name of the Vulnerable Software and Affected Versions: M2000 Smart4Web versions prior to 5.020241004 Description: The issue allows a remote attacker to execute arbitrary code via the error parameter in the URL. This is a Cross Site Scripting vulnerability, which can lead to the execution of...

CVE-2024-50800

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

CVE-2024-50800

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL...

CVE-2024-50800

The M2000 Smart4Web content management system is vulnerable to a Cross-Site Scripting (XSS) flaw in versions prior to v.5.020241004 . A remote attacker can exploit the error parameter in the URL to achieve arbitrary code execution . To remediate this, users should update to version 5.020241004 or...