CVE-2024-49708 in iKSORISinformation

Résumé

par MITRE • 14/04/2025

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

CERT-PL

Réserver

17/10/2024

Divulgation

14/04/2025

Modérer

accepté

Entrée

VDB-304639

CPE

prêt

EPSS

0.00218

KEV

non

Activités

très faible

Sources

Interested in the pricing of exploits?

See the underground prices here!