PT-2024-31994
CVE-2024-46453
·
Published
2024-09-27
·
Updated
2024-10-07
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
iq3xcite versions 2.31 through 3.05
Description
A cross-site scripting (XSS) issue in the "/test/" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Recommendations
For versions 2.31 through 3.05, consider disabling access to the "/test/" component until a fix is available. Restrict the use of this component to minimize the risk of exploitation. Avoid using crafted payloads in the affected component to prevent arbitrary web script execution.
Found an issue in the description? Have something to add? Feel free to write us 👾