CVE-2024-25506

ProcessMaker, Inc ProcessMaker versions prior to 4.0 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit this by controlling the pm_sys_sys cookie, which may allow the execution of arbitrary code . To remediate this issue, users should update to version 4.0...

CVE-2024-25506: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pmsyssys cookie...

ProcessMaker security vulnerabilities

ProcessMaker is a Php-written site builder for business process management BPM and workflow management from ProcessMaker, Inc. in the United States. A security vulnerability exists in ProcessMaker versions prior to 4.0 that stems from the presence of a cross-site scripting vulnerability that coul...