Vulnerability — CVE-2024-42939

CVE-2024-42939

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-42939
Description:: A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the configured remarks text field.
Last updated date:: 08/31/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/31/2024
Reference url to background: https://github.com/tcyba/open_vul/blob/main/yzncms%20has%20a%20storage%20xss%20vulnerability.pdf