A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Survey Label Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251545 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/sweatxi/BugHub/blob/main/jspXCMS-%20Survey%20label.pdf | Exploit |
| https://vuldb.com/?ctiid.251545 | Permissions Required |
| https://vuldb.com/?id.251545 | Third Party Advisory |
Configurations
History
25 Jan 2024, 20:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:jspxcms:jspxcms:10.2.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Jspxcms
Jspxcms jspxcms |
|
| References | () https://vuldb.com/?id.251545 - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.251545 - Permissions Required | |
| References | () https://github.com/sweatxi/BugHub/blob/main/jspXCMS-%20Survey%20label.pdf - Exploit |
19 Jan 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-19 16:15
Updated : 2024-05-17 02:34
NVD link : CVE-2024-0721
Mitre link : CVE-2024-0721
CVE.ORG link : CVE-2024-0721
JSON object : View
Products Affected
jspxcms
- jspxcms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')