ProcessMaker 安全漏洞

ProcessMaker is a Php-written site builder for business process management BPM and workflow management from ProcessMaker, Inc. in the United States. A security vulnerability exists in ProcessMaker versions prior to 4.0 that stems from the presence of a cross-site scripting vulnerability that coul...

CVE-2024-25506

ProcessMaker CVE-2024-25506 describes a Cross Site Scripting vulnerability in ProcessMaker before 4.0 where an attacker can remotely run arbitrary code by manipulating the pm_sys_sys cookie. Affected software: ProcessMaker prior to version 4.0. Root cause: improper handling of the pm_sys_sys cook...