medium6.5
CVE-2024-25506
Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys c…
Impact
Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys cookie.
Affected products
| Product | Affected versions |
|---|---|
| Process Maker, Inc ProcessMaker | before 4.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.