CVE-2024-8328
Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Analyzed - twcert@cert.org.tw
- Published
- 2024-08-30
- Last modified
- 2024-08-30
- Weaknesses
- CWE-79
Affected products
- Easy Test Online Learning And Testing Platform (Easy Test Online Learning And Testing Platform Project)
- Easy Test Online Learning And Testing Platform (Hwa Jiuh Digital Technology)
References
- https://www.twcert.org.tw/en/cp-139-8033-0a98f-2.html
- https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html
