medium6.1
CVE-2024-37679
Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd.
Impact
Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Finesoft Project | Finesoft | through 8.0 |