A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Cadclick
Cadclick cadclick |
|
Weaknesses | CWE-79 | |
CPEs | cpe:2.3:a:cadclick:cadclick:*:*:*:*:*:*:*:* | |
Vendors & Products |
Cadclick
Cadclick cadclick |
|
Metrics |
cvssV3_1
|
Fri, 04 Oct 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Fri, 04 Oct 2024 17:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-10-04T00:00:00
Updated: 2024-10-04T20:39:28.355881
Reserved: 2024-07-18T00:00:00
Link: CVE-2024-41514
Vulnrichment
Updated: 2024-10-04T18:27:19.463Z
NVD
Status : Awaiting Analysis
Published: 2024-10-04T18:15:08.297
Modified: 2024-10-07T19:37:11.483
Link: CVE-2024-41514
Redhat
No data.