Vulnerability — CVE-2024-24507

CVE-2024-24507

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-24507
Description:: Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component.
Last updated date:: 03/13/2025

Type:: exploit
Confidence:: HIGH
Date of publishing:: 09/05/2024
Reference url to background: https://gist.github.com/Xandsz/2b409acb81e846fc3478600f984785a1