Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-41930

Sept. 30, 2024, 12:46 p.m.

Tags

CWE-79
vultures@jpcert.or.jp
2024-09-27
CVE-2024-41930

Product(s) Impacted

MF Teacher Performance Management System

  • 6

Description

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

Weaknesses

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CWE ID: 79

Date

Published: Sept. 27, 2024, 9:15 a.m.

Last Modified: Sept. 30, 2024, 12:46 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

References

https://jvn.jp/ vultures@jpcert.or.jp