CVE-2024-48461

Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field.

Score

CVSS 3.1 4.8 Medium

Status

Deferred - cve@mitre.org

Published

2024-10-29

Last modified

2024-10-30

Weaknesses

CWE-79

Affected products

• Admin Panel (Telsalogger)

References

• https://github.com/bassmaster187/TeslaLogger/blob/65f5ff43c7cacf0391ddc21b90f77a2e8c8d860e/TeslaLogger/bin/changelog.md…
• https://mohammedshine.github.io/CVE-2024-48461.html