CVE-2024-24571mediumCWE-80

CVE-2024-24571: medium-severity vulnerability in WillyXJ facileManager

facileManager Systemic Cross-Site Scripting (XSS)

Published · Updated

Follow this CVE+ Monitor facileManager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.4%
facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
WillyXJ · facileManager
Related CVEs — WillyXJ facileManager

In the same product, most dangerous first.

CVE-2024-24573HIGHfacileManager Privilege Escalation via Mass AssignmentEPSS 0.8%CVE-2024-24572MEDIUMfacileManager Authenticated Variable Manipulation leading to SQL InjectionEPSS 0.6%