PT-2024-19560 · Wallos · Wallos

Published 2024-02-23 · Updated 2024-08-14 · CVE-2024-22776

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wallos version 0.9

Description The issue concerns Cross Site Scripting (XSS) in text-based input fields due to a lack of proper validation, excluding fields that require specific formats like date fields.

Recommendations For Wallos version 0.9, ensure proper validation is implemented for all text-based input fields to prevent XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-22776

Affected Products

Wallos

References · 4

• 🔥 https://webity-luescher.notion.site/webity-luescher/Wallos-v0-9-to-v1-2-2-CVE-2024-22776-Stored-XSS-Vulnerability-in-all-text-based-input-fields-6622fb4cfbe0430aa0b1d4b3edcb67b0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-22776 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22776 · Vendor Advisory
• https://github.com/ellite/Wallos · Note