CVE-2024-9571 — Cross-Site Scripting vulnerability in SOPlanning
Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/xajax_server.php, affecting multiple par…
Published: 2024-10-07 · CVSS: 6.3 · CVSS 3.1
Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/xajax_server.php, affecting multiple parameters. This could allow a remote user to send a specially crafted query to an authenticated user and partially take control of their browser session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7