Lucene search
HistoryJun 12, 2024 - 5:15 p.m.
CVE-2024-22855
cve-2024-22855
user maintenance section
arbitrary web scripts
html
crafted payload
last name parameter
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
42.2%
A cross-site scripting (XSS) vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter.
Affected configurations
Node
itssimlogRange<1.308
References
Related
cve
cve
CVE-2024-22855
2024-06-12 17:15:49
vulnrichment
vulnrichment
CVE-2024-22855
2024-06-12 00:00:00
cvelist
cvelist
CVE-2024-22855
2024-06-12 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
42.2%
Related for NVD:CVE-2024-22855