CVE-2024-2727CWE-79

Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Medium · published March 22, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-03-22T13:36Z
EPSS history
Timeline
  • 22 MAR 13:36Z
    Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
    cvelistv5