CVE-2024-37680

2024-06-2400:00:00

mitre

github.com

hangzhou meisoft

information technology

cross site scripting

remote attackers

arbitrary code

url

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows remote attackers to execute arbitrary code. Enter any account and password, click Login, the page will report an error, and a controllable parameter will appear at the URL:weburl.

References

github.com/dabaizhizhu/123/issues/5