PT-2024-34294
CVE-2024-50518
·
تاريخ النشر
2024-11-19
·
تاريخ التحديث
2024-11-19
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
Pricer Ninja versions n/a through 2.1.0
Description:
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks.
Recommendations:
For versions n/a through 2.1.0, update to a version later than 2.1.0 to resolve the issue.
As a temporary workaround, consider restricting user input to minimize the risk of exploitation.
Avoid using potentially vulnerable web page generation functions until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾