critical9.8
CVE-2024-7098
Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.
Impact
Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sfs | Winsure | before 4.6.2 |