PT-2025-13475 · Undefined · Undefined

Published 2025-03-28 · Updated 2025-04-23 · CVE-2024-53568

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Volmarg Personal Management System version 1.4.65

Description A stored cross-site scripting (XSS) issue in the Image Upload section allows authenticated attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the tag parameter.

Recommendations For Volmarg Personal Management System version 1.4.65, consider disabling the Image Upload section until a patch is available to prevent exploitation. Restrict access to the tag parameter in the Image Upload section to minimize the risk of arbitrary script execution.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-53568

Affected Products

Undefined

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-53568 · Security Note
• https://getastra.com/blog/vulnerability/cve-2024-53568stored-cross-site-scripting-xss-vulnerability-in-volmarg-personal-management-system · Note
• https://twitter.com/VulmonFeeds/status/1914866957939089577 · Twitter Post
• https://t.me/cvedetector/23542 · Telegram Post
• https://medium.com/@rudranshsinghrajpurohit/cve-2024-53568-stored-cross-site-scripting-xss-vulnerability-in-volmarg-personal-management-cfbaec55046f · Note
• https://twitter.com/getastra/status/1905574348431491080 · Twitter Post
• https://twitter.com/CVEnew/status/1914753053959344190 · Twitter Post
• https://t.me/cvetracker/22160 · Telegram Post