Security Advisory

CVE-2024-42904

6.1
MEDIUM

Vulnerability Description

A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter at /Controllers/ClientController.php.
Published Date September 3, 2024
Official Source NIST NVD Advisory