← CVE Intelligence

CVE-2024-4310

Cross-site Scripting (XSS) vulnerability in HubBank PUBLISHED

Description (CNA)

Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.

Affected (CNA)

Vendor / productVersions
Ofofonobs / HubBankaffected 1.0.2

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.