CVE-2024-6892 Journyx Reflected Cross Site Scripting

2024-08-0723:19:00

CWE-81

KoreLogic

github.com

reflected cross site scripting

journyx

cve-2024-6892

javascript

web application

attackers

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:*:*:*"
    ],
    "vendor": "journyx",
    "product": "journyx",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]