CVE-2024-9007

CVE-2024-9007 affects 123Solar 1.8.4.5. The vulnerability is a cross-site scripting issue in an unknown part of the file /detailed.php , caused by manipulation of the date1 parameter. The issue is exploitable remotely via unsanitized input reflected in the response, enabling arbitrary JavaScript ...