CVE-2024-9147
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Summary
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings.
This issue affects PosPratik: before v3.2.1.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Bna Informatics | PosPratik | 0 < v3.2.1 | affected |
Weaknesses
- CWE-80: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
- https://www.usom.gov.tr/bildirim/tr-24-1815
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1815
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.