CVE-2023-24744 in AdminPlus

Resumen

por MITRE • 2023-05-03

Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrary code via the onload function within the application DOM.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 2023-01-30
• Divulgación: 2023-05-03
• Moderación: aceptado
• Artículo: VDB-227988
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00548
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-24744
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-24744
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-24744/