Mkrs2404

**Name of the Vulnerable Software and Affected Versions** Magmi version 0.7.22 **Description** A Cross-Site Scripting (XSS) issue was discovered due to insufficient filtration of user-supplied data, specifically the `prefix` variable, passed to the "magmi-git-master/magmi/web/ajax gettime.php" API endpoint. This allows an attacker to execute arbitrary HTML and script code in a browser within the context of the vulnerable website. **Recommendations** For Magmi version 0.7.22, as a temporary workaround, consider restricting access to the "magmi-git-master/magmi/web/ajax gettime.php" API endpoint until a patch is available. Additionally, ensure proper filtration of user-supplied data, especially the `prefix` variable, to prevent arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.