ID CVE-2024-25506
Summary Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys cookie.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 28-03-2024 - 20:53
Published 28-03-2024 - 20:15
Last modified 28-03-2024 - 20:53
Back to Top