CVE-2024-8002 — VIWIS LMS File Upload cross site scripting

CVE-2024-8002

VIWIS LMS File Upload cross site scripting PUBLISHED

Description (CNA)

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scripting. The attack can be launched remotely. Upgrading to version 9.12 is able to address this issue. It is recommended to upgrade the affected component.

Affected (CNA)

Vendor / product	Versions
VIWIS / LMS	affected 9.11

CWE

CWE-79, CWE-94

References

https://vuldb.com/?id.290767
https://vuldb.com/?ctiid.290767

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.