CVE-2024-34749

Summary

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user.

Affected Software

Weaknesses

• Cross-site scripting (XSS)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• http://p.horm.org/er/
• https://github.com/eyedean/phormer
• https://sourceforge.net/projects/rephormer/
• https://jvn.jp/en/jp/JVN61054671/

References

• http://p.horm.org/er/
• https://github.com/eyedean/phormer
• https://sourceforge.net/projects/rephormer/
• https://jvn.jp/en/jp/JVN61054671/

• ←Previous
• Next→