Lucene search
MitreVULNRICHMENT:CVE-2024-37392HistoryAug 23, 2024 - 12:00 a.m.
CVE-2024-37392
2024-08-2300:00:00
mitre
github.com
2
cross-site scripting
smseagle
vulnerability
user input
sms messages
javascript code
web-gui
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A stored Cross-Site Scripting (XSS) vulnerability has been identified in SMSEagle software version < 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the inbox. This could allow an attacker to inject malicious JavaScript code into an SMS message, which gets executed when the SMS is viewed and specially interacted in web-GUI.
Related
cve
cve
CVE-2024-37392
2024-08-23 21:15:07
cvelist
cvelist
CVE-2024-37392
2024-08-23 00:00:00
nvd
nvd
CVE-2024-37392
2024-08-23 21:15:07
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-37392