CVE-2024-46655

A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2024-09-25

Last modified

2024-09-25

Weaknesses

CWE-79

Affected products

• Ellevo (Ellevo)

References

• https://csflabs.github.io/cve/2024/09/24/cve-2024-46655-Cross-Site-Scripting-%28XSS%29-%28Reflected%29-in-Ellevo-applic…
• https://ellevo.com/