Description
A cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL:errorname parameter after a failed login attempt.
Medium · 5.4
CVE-2024-35504
EUVD-2024-35725
A cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via…
Published May 30, 2024 · Updated Mar 27, 2025 · Assigned by mitre