CVE-2024-9283 MEDIUM

CVE-2024-9283: RelaxedJS ReLaXed Pug to PDF Converter cross site scripting

Vendor Relaxedjs
Product ReLaXed
Weakness CWE-79 · XSS
Published September 27, 2024
Last update September 27, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

September 27, 2024 CVE published
September 27, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2018-25056 yolapi metadata.py render_description cross site scripting CVE-2025-6229 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` CVE-2025-21621 GeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML format CVE-2021-25060 Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS CVE-2021-28628 Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp