Lucene search
HistoryJun 20, 2024 - 2:15 a.m.
CVE-2024-6177
cve-2024-6177
cross-site scripting
lg electronics supersign cms
reflected xss
supersign cms
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
Affected configurations
Node
lgsupersign_cmsRange4.1.3–4.3.1
Related
cve
cve
CVE-2024-6177
2024-06-20 02:15:11
vulnrichment
vulnrichment
CVE-2024-6177 XSS vulnerability in LG SuperSign CMS
2024-06-20 00:52:25
cvelist
cvelist
CVE-2024-6177 XSS vulnerability in LG SuperSign CMS
2024-06-20 00:52:25
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for NVD:CVE-2024-6177