cve/2024/CVE-2024-26542.md
2024-06-18 02:51:15 +02:00

693 B

CVE-2024-26542

Description

Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field.

POC

Reference

Github

No PoCs found on GitHub currently.