Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.

VectorNETWORK

PublishedOct 11, 2024, 21:15

Published Bycve@mitre.org

Base Score

Score6.1

Affected Versions

No affected versions found.

References

https://www.znuny.com
https://www.znuny.org/en/advisories
https://www.znuny.org/en/advisories/zsa-2024-05

Weakness Type

CWE-79

CVSS Metrics

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK