Cross-Site Scripting Vulnerability in Shenzhen Landray Software's EKP
CVE-2024-48068
Currently unrated
What is CVE-2024-48068?
A cross-site scripting (XSS) vulnerability exists in the Landray EKP application developed by Shenzhen Landray Software Co., LTD. This security flaw enables attackers to inject arbitrary web scripts or HTML through specially crafted payloads, potentially leading to unauthorized access and manipulation of user data. The vulnerability is present in version 16 and earlier, emphasizing the need for users to ensure their applications are properly secured against such exploits.