CVE-2024-9672CWE-917

Reflected XSS in PaperCut MF

Medium · published December 9, 2024

CVSS v4.0
6.3
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-917 · Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Published
2024-12-09T23:49Z
EPSS history
Timeline
  • 09 DEC 23:49Z
    Reflected XSS in PaperCut MF
    cvelistv5