CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2024-24396
Medium (6.1) in stimulsoft dashboard.js. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in stimulsoft-dashboards-js 2024.1.2.
Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- stimulsoft:dashboard.js
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9m6m-c64r-w4f4 | npm | stimulsoft-dashboards-js | <2024.1.2 | 2024.1.2 |