PT-2024-33461 · Unknown · Dennis Hoppe Encyclopedia / Glossary / Wiki

Soprobro

·

Published

2024-10-17

·

Updated

2024-10-22

·

CVE-2024-49320

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Dennis Hoppe Encyclopedia / Glossary / Wiki versions 1.7.60 and earlier
Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows Reflected XSS, which can be exploited by attackers. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For versions 1.7.60 and earlier, update to a version later than 1.7.60 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of Reflected XSS exploitation. Avoid using potentially vulnerable API endpoints until the issue is resolved. At the moment, there is no information about additional mitigation measures.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-49320

Affected Products

Dennis Hoppe Encyclopedia / Glossary / Wiki