Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-6178 EUVD-2024-47317GHSA-85x5-7hjw-hj56

XSS vulnerability in LG SuperSign CMS

Published Jun 20, 2024 · Updated Aug 1, 2024 · Assigned by LGE

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.

Affected products

VendorProductAffectedFixed
LG Electronics SuperSign CMS 4.1.3 – < < 4.3.1 < 4.3.1

References