CVE-2024-41374

2024-07-2600:00:00

mitre

github.com

icecoder 8.1

cross site scripting

lib/settings-screen.php

vulnerability

AI Score

6.1

Confidence

High

EPSS

Percentile

9.4%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:icecoder:icecoder:8.1:*:*:*:*:*:*:*"
    ],
    "vendor": "icecoder",
    "product": "icecoder",
    "versions": [
      {
        "status": "affected",
        "version": "8.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]