CVE-2024-36498

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-36498 Stored cross site scripting

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-47947

The software Image Access Scan2Net (versions 7.40, 7.42, and 7.42B and earlier) is vulnerable to stored cross-site scripting (XSS) due to missing input sanitization. An attacker with Poweruser or Admin privileges can exploit the "Edit Disclaimer Text" function located at https://$SCANNER/cgi/admi...