Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-46475 EUVD-2024-41854GHSA-3vv9-hcm7-cvjm

A reflected cross-site scripting (XSS) vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute …

Published Sep 30, 2024 · Updated Sep 30, 2024 · Assigned by mitre

Description

A reflected cross-site scripting (XSS) vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

References