CVE-2024-37678

2024-06-2400:00:00

mitre

github.com

cross site scripting

finesoft

remote attacker

arbitrary code

crafted script

hangzhou meisoft information technology co.

ltd.

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script.

References

github.com/dabaizhizhu/123/issues/3