CVE-2024-6742

AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.

Score

CVSS 3.1 5.4 Medium

Status

Modified - twcert@cert.org.tw

Published

2024-07-15

Last modified

2024-08-01

Weaknesses

CWE-79

Affected products

• Space Management System (Aguardnet)
• Space Management System (Space Management System Project)

References

• https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html
• https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html