CVE-2024-6252

Summary

A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Task Handler. The manipulation of the argument onerror leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269419.

Affected Software

VendorProductVersion RangeStatus
ZorlanSkyCaiji2.0affected
ZorlanSkyCaiji2.1affected
ZorlanSkyCaiji2.2affected
ZorlanSkyCaiji2.3affected
ZorlanSkyCaiji2.4affected
ZorlanSkyCaiji2.5affected
ZorlanSkyCaiji2.6affected
ZorlanSkyCaiji2.7affected
ZorlanSkyCaiji2.8affected

Weaknesses

  • CWE-79: CWE-79 Cross Site Scripting

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References