Stimulsoft Dashboard.JS Cross Site Scripting vulnerability - stimulsoft-dashboards-js - CVE-2024-24397 | SmartScanner

Description

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field.

Recommendation

Update the stimulsoft-dashboards-js package to the latest compatible version. Followings are version details:

Affected version(s): < 2024.1.2
Patched version(s): 2024.1.2

References

GHSA-9cgf-pxwq-2cpw
cloud-trustit.spp.at
stimulsoft.com
cves.at
CVE-2024-24397
CWE-79
CAPEC-310
OWASP 2021-A3
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Stimulsoft Dashboard.JS Cross Site Scripting vulnerability - stimulsoft-dashboards-js and gives you actionable findings to investigate.

Start a free scan

Related Issues

Stimulsoft Dashboard.JS Cross Site Scripting vulnerability - CVE-2024-24396
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option - CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements - CVE-2024-38357
Cross-site scripting vulnerability in TinyMCE plugins - CVE-2024-21910

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated March 02, 2024