CVE-2024-3791

WBSAirback (version 21.02.04) contains a stored XSS in /admin/SystemConfiguration, affecting the name, free memory limit fields, and type/password parameters. Exploitation could allow a remote attacker to craft a URL that steals session data. The PT-2024-27822 entry provides concrete details of t...