PT-2024-31994
CVE-2024-46453
·
تاريخ النشر
2024-09-27
·
تاريخ التحديث
2024-10-07
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
iq3xcite versions 2.31 through 3.05
Description
A cross-site scripting (XSS) issue in the "/test/" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Recommendations
For versions 2.31 through 3.05, consider disabling access to the "/test/" component until a fix is available. Restrict the use of this component to minimize the risk of exploitation. Avoid using crafted payloads in the affected component to prevent arbitrary web script execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾