medium5.3
CVE-2024-5961
Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS).
Impact
Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2ClickPortal | 2ClickPortal Software Versions From 7.2.31 | through 7.6.4. |
Versions were read from the advisory text. No structured product data has been published for this record yet.