Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-48531 EUVD-2024-43174GHSA-9f2w-8h7w-mrqr

A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to …

Published Nov 20, 2024 · Updated Nov 20, 2024 · Assigned by mitre

Description

A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

References