PT-2024-31994

CVE-2024-46453

·

Published

2024-09-27

·

Updated

2024-10-07

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions iq3xcite versions 2.31 through 3.05
Description A cross-site scripting (XSS) issue in the "/test/" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Recommendations For versions 2.31 through 3.05, consider disabling access to the "/test/" component until a fix is available. Restrict the use of this component to minimize the risk of exploitation. Avoid using crafted payloads in the affected component to prevent arbitrary web script execution.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾