medium6.1
CVE-2024-10288
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user …
Impact
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ujangrohidin | Localserver | Version 1.0.9 |