Description (CNA)
Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trol InterMedia Sp. z o.o. Sp. k. / 2ClickPortal | affected 7.2.31 through 7.6.4 |
CWE
CWE-79
References
- https://cert.pl/en/posts/2024/06/CVE-2024-5961/
- https://cert.pl/posts/2024/06/CVE-2024-5961/
- https://2clickportal.pl/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.