CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS)

Medium · published October 1, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Published
2024-10-01T00:00Z
EPSS history
Timeline
  • 01 OCT 00:00Z
    Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS)
    cvelistv5