CVE-2024-57409

Name of the Vulnerable Software and Affected Versions cool-admin-java version v1.0

Description A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field.

Recommendations For cool-admin-java version v1.0, consider disabling the Parameter List module until a patch is available to prevent exploitation of the stored XSS vulnerability. Restrict access to the internet pictures field to minimize the risk of arbitrary script execution.