CVE-2024-43024

CVE-2024-43024 affects RWS MultiTrans, with multiple stored XSS vulnerabilities in version 7.0.23324.2 and earlier. The issue allows an attacker to execute arbitrary web scripts or HTML through a crafted payload. The available connected documents confirm the existence of stored XSS across these r...

CVE-2024-43025

Summary: CVE-2024-43025 affects RWS MultiTrans, versions up to 7.0.23324.2, via HTML injection. This can allow altering HTML layout and may enable phishing payloads in sent emails. Technical details: No exploit vectors are provided in the documents beyond the HTML-injection description; affected ...