2024-06-27 14:03:13 +00:00

24 lines
947 B
JSON

{
"id": "CVE-2024-33328",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-06-26T19:15:13.373",
"lastModified": "2024-06-27T12:47:19.847",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the pageId parameter."
},
{
"lang": "es",
"value": " Una vulnerabilidad de Cross Site Scripting (XSS) en el componente main.jsp de Lumisxp v15.0.xa v16.1.x permite a los atacantes ejecutar scripts web o HTML de su elecci\u00f3n a trav\u00e9s de un payload manipulado inyectado en el par\u00e1metro pageId."
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/rodnt/cf2946b0f6136cd03ee4737aa72ae95b",
"source": "cve@mitre.org"
}
]
}