Stimulsoft Dashboard.JS Cross Site Scripting vulnerability

Description

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.

Recommendation

Update the stimulsoft-dashboards-js package to the latest compatible version. Followings are version details:

Affected version(s): < 2024.1.2
Patched version(s): 2024.1.2

References

GHSA-9m6m-c64r-w4f4
cloud-trustit.spp.at
stimulsoft.com
cves.at
CVE-2024-24396
CWE-79
CAPEC-310
OWASP 2021-A3
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Stimulsoft Dashboard.JS Cross Site Scripting vulnerability and gives you actionable findings to investigate.

Start a free scan

Related Issues

Stimulsoft Dashboard.JS Cross Site Scripting vulnerability - stimulsoft-dashboards-js - CVE-2024-24397
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option - CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements - CVE-2024-38357
Cross-site scripting vulnerability in TinyMCE plugins - CVE-2024-21910

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated February 14, 2024