CVE-2024-9672

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.

Score

CVSS 4.0 6.3 Medium

Status

Analyzed - eb41dac7-0af8-4f84-9f6d-0272772514f4

Published

2024-12-10

Last modified

2024-12-10

Weaknesses

CWE-79, CWE-917

Affected products

• Papercut Mf (Papercut)
• Papercut Ng (Papercut)

References

• https://www.papercut.com/kb/Main/security-bulletin-december-2024/