PT-2024-31994 · Iq3Xcite · Iq3Xcite

Published 2024-09-27 · Updated 2024-10-07 · CVE-2024-46453

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions iq3xcite versions 2.31 through 3.05

Description A cross-site scripting (XSS) issue in the "/test/" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Recommendations For versions 2.31 through 3.05, consider disabling access to the "/test/" component until a fix is available. Restrict the use of this component to minimize the risk of exploitation. Avoid using crafted payloads in the affected component to prevent arbitrary web script execution.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-46453

Affected Products

Iq3Xcite

References · 5

• 🔥 https://github.com/nosmo-gla/iq3xcite-XSS-2.31-3.05/tree/main · Exploit
• https://osv.dev/vulnerability/CVE-2024-46453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46453 · Security Note
• https://t.me/cvenotify/97250 · Telegram Post
• https://t.me/cvedetector/6581 · Telegram Post