CVE-2024-8942 MEDIUM

CVE-2024-8942: Cross-site Scripting vulnerability on Scriptcase

Vendor Scriptcase
Product Scriptcase
Weakness CWE-79 · XSS
Published September 24, 2024
Last update September 24, 2024
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a specially crafted URL to a victim and retrieve their credentials.

Key dates

02Disclosure timeline

September 24, 2024 CVE published
September 24, 2024 Record updated