CVE-2024-48648

n/a / n/a PUBLISHED

Description (CNA)

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. This vulnerability allows attackers to inject malicious scripts into URLs, which are reflected back by the server in the response without proper sanitization or encoding.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.