CVE-2024-25506: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pmsyssys cookie...

CVE-2024-25506

ProcessMaker, Inc ProcessMaker versions prior to 4.0 are susceptible to a Cross Site Scripting (XSS) vulnerability. A remote attacker can execute arbitrary code by gaining control of the pm_sys_sys cookie. To remediate this, users should update to version 4.0 or later . As a temporary workaround,...

ProcessMaker 安全漏洞

ProcessMaker is a Php-written site builder for business process management BPM and workflow management from ProcessMaker, Inc. in the United States. A security vulnerability exists in ProcessMaker versions prior to 4.0 that stems from the presence of a cross-site scripting vulnerability that coul...