CVE-2024-24571CWE-80

facileManager Systemic Cross-Site Scripting (XSS)

Medium · published January 31, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2024-01-31T22:32Z
EPSS history
Timeline
  • 31 JAN 22:32Z
    facileManager Systemic Cross-Site Scripting (XSS)
    cvelistv5