2 matches found
CVE-2024-7103: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the login flow, potentially leading to UI modifications...
5.4CVSS5.9AI score0.00218EPSS
SaveExploits0References1
20