Cross-Site Scripting Vulnerability in MS Basic by MingSoft
CVE-2024-33748

4.1MEDIUM

Key Information:

Vendor

MingSoft

Status
MS Basic
Vendor
CVE Published:
7 May 2024

What is CVE-2024-33748?

A cross-site scripting (XSS) vulnerability exists in the search functionality of MS Basic versions 2.1.13.4 and earlier, allowing attackers to inject malicious scripts. Exploitation of this flaw could enable unauthorized actions on behalf of users, leading to potential data leaks or account takeovers. It is essential for affected users to implement patches or upgrades to mitigate these security risks.

References

https://mvnrepository.com/artifact/net.mingsoft/ms-basic
https://github.com/Fr1ezy/Fr1ezy-ms-basic_XSS

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.