CVEvulnerability
CVE-2024-45920
5.4 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-09-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature.
Affected configurations
• solvait solvait 24.4.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://gist.github.com/ipxsec/10526db2cbfcb899a70dcb8f0ee53a99 Exploit, Third Party Advisory