Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-8652 EUVD-2024-49325GHSA-qchx-h2pq-fhfp

Netcat CMS: reflected cross-site scripting in openstat module

Published Sep 19, 2024 · Updated Sep 19, 2024 · Assigned by Kaspersky

Description

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site.
This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others.

Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.

Affected products

VendorProductAffectedFixed
NetCat NetCat CMS 6.4.0.24126.2 6.4.0.24248

References