CVE-2024-45920

A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application

Medium · published September 30, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00334 · 25.5th percentile
Published
2024-09-30T00:00Z
EPSS history
Timeline
  • 30 SEP 00:00Z
    A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application
    cvelistv5