CVE-2024-49392CWE-79

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page

Medium · published October 17, 2024

CVSS v3.0
5.7
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.

The record
Technical detail
CVSS v3.0
5.7 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-10-17T09:48Z
EPSS history
Timeline
  • 17 OCT 09:48Z
    Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
    cvelistv5