CVE-2024-8942 — Cross-site Scripting vulnerability on Scriptcase

CVE-2024-8942

Cross-site Scripting vulnerability on Scriptcase PUBLISHED

Description (CNA)

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a specially crafted URL to a victim and retrieve their credentials.

Affected (CNA)

Vendor / product	Versions
Scriptcase / Scriptcase	affected 9.4.019

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-scriptcase

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.