CVE-2024-36498

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-36498 Stored cross site scripting

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-47947

The Image Access Scan2Net scanning software is vulnerable to stored cross-site scripting (XSS) due to missing input sanitization. The vulnerability exists in the "Edit Disclaimer Text" function within the configuration menu (accessible via https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre), which...