CVE-2024-49708 in iKSORISИнформация

Сводка

по MITRE • 14.04.2025

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Ответственный

CERT-PL

Резервировать

17.10.2024

Раскрытие

14.04.2025

Модерация

принято

Вход

VDB-304639

EPSS

0.00218

KEV

Нет

Деятельности

Очень низкий

Источники

Do you know our Splunk app?

Download it now for free!