CVE-2024-34090

An issue was discovered in Archer Platform 6 before 2024.04

High · published May 6, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Archer Control Panel (ACP) did not previously escape content appropriately. 6.14 P3 (6.14.0.3) is also a fixed release.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.6th percentile
Published
2024-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    An issue was discovered in Archer Platform 6 before 2024.04
    cvelistv5