CVE-2024-5961

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting(XSS).An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser.This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
CERT-PLCNA
---
---
CISA-ADPADP
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Common Weakness Enumeration
References
https://2clickportal.pl/
https://cert.pl/en/posts/2024/06/CVE-2024-5961/
https://cert.pl/posts/2024/06/CVE-2024-5961/
https://2clickportal.pl/
https://cert.pl/en/posts/2024/06/CVE-2024-5961/
https://cert.pl/posts/2024/06/CVE-2024-5961/