Security Advisory
CVE-2024-25506
6.5
MEDIUM
Vulnerability Description
Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys cookie.
Published Date
March 28, 2024
Official Source
NIST NVD Advisory