CVE-2024-28034

Cross-site scripting vulnerability exists in Mini Thread Version 3.33βi

Medium · published March 26, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability exists in Mini Thread Version 3.33βi. An arbitrary script may be executed on the web browser of the user accessing the website that uses the product. Note that the developer was unreachable, therefore, users should consider stop using Mini Thread Version 3.33βi.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.8th percentile
Published
2024-03-26T09:36Z
EPSS history
Timeline
  • 26 MAR 09:36Z
    Cross-site scripting vulnerability exists in Mini Thread Version 3.33βi
    cvelistv5