CVE-2024-24396

2024-02-0500:00:00

mitre

github.com

stimulsoft

cross site scripting

remote attacker

arbitrary code

search bar

AI Score

7.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:stimulsoft:dashboards.js:2024.1.2:*:*:*:*:node.js:*:*"
    ],
    "vendor": "stimulsoft",
    "product": "dashboards.js",
    "versions": [
      {
        "status": "affected",
        "version": "2024.1.2"
      }
    ],
    "defaultStatus": "unknown"
  }
]