CVE-2024-24571

facileManager Systemic Cross-Site Scripting (XSS)

CVSS 5.4 MEDIUMEPSS 0.4%CWE-80

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Produtos afetados

WillyXJ · facileManager

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/WillyXJ/facileManager/commit/0aa850d4b518f10143a4c675142b15caa5872877 https://github.com/WillyXJ/facileManager/security/advisories/GHSA-h7w3-xv88-2xqj