CVE-2024-49707 in iKSORISinformazioni

Riassunto

di MITRE • 14/04/2025

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for resetting user's password with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsabile

CERT-PL

Prenotare

17/10/2024

Divulgazione

14/04/2025

Moderazione

accettato

CPE

pronto

EPSS

0.00230

KEV

no

Attività

molto basso

Fonti

Do you know our Splunk app?

Download it now for free!