medium6.1
CVE-2024-37680
Hangzhou Meisoft Information Technology Co., Ltd.
Impact
Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows remote attackers to execute arbitrary code. Enter any account and password, click Login, the page will report an error, and a controllable parameter will appear at the URL:weburl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Finesoft Project | Finesoft | through 8.0 |