Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-48535 EUVD-2024-43177GHSA-prvh-6xrh-q7g5

A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML…

Published Nov 20, 2024 · Updated Nov 20, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.

References