CVE-2024-4336 HIGH

CVE-2024-4336: Múltiple vulnerabilities on Adive Framework

Vendor Adive

Product Adive Framework

Weakness CWE-79 · XSS

Published April 30, 2024

Last update August 15, 2024

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of an authenticated user.

Key dates

02Disclosure timeline

April 30, 2024 CVE published

August 15, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-4336 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-69006 WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-20778 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-2569 Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels CVE-2021-24826 Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site Scripting CVE-2024-2684 Campcodes Online Job Finder System index.php cross site scripting