medium6.1
CVE-2024-29273
There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.
Impact
There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dzzoffice | Dzzoffice | Version 2.02.1_sc_utf8 |