medium6.1
CVE-2024-26542
Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.
Impact
Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bonitasoft | Bonita Web | All versions |