CVE-2024-55009

Name of the Vulnerable Software and Affected Versions AutoBib - Bibliographic collection management system versions 3.1.140 and earlier

Description A reflected cross-site scripting (XSS) issue allows attackers to execute arbitrary Javascript in the context of a victim's browser. This is achieved by injecting a crafted payload into the WCE=topFrame&WCU= parameter.

Recommendations For AutoBib - Bibliographic collection management system versions 3.1.140 and earlier, consider restricting access to the vulnerable parameter WCU in the affected API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.