CVE-2024-52967

MEDIUM Year: 2024
CVSS v3 Score
4.8
Medium
Weakness Type
CWE-80
View all →

Vulnerability Description

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.

Related Vulnerabilities

CVE-2017-20098

MEDIUM
CVSS:4.8(Medium)

A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent...

CWE-802017

CVE-2019-18944

MEDIUM
CVSS:4.8(Medium)

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.

CWE-802019

CVE-2020-5267

MEDIUM
CVSS:4.8(Medium)

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be...

CWE-802020

CVE-2021-32719

MEDIUM
CVSS:4.8(Medium)

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` p...

CWE-802021

CVE-2021-39348

MEDIUM
CVSS:4.8(Medium)

The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file ...

CWE-802021

CVE-2022-20765

MEDIUM
CVSS:4.8(Medium)

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to...

CWE-802022