Security Advisory
CVE-2024-2598
7.1
HIGH
Vulnerability Description
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/select_send_2.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published Date
March 18, 2024
Official Source
NIST NVD Advisory