CVE-2024-37776

4.8 mediumEPSS 0.3%

Medium (4.8) in sunbirddcim dctrack. EPSS 0.3% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2024-12-16
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

sunbirddcim:dctrack

References

https://s3.us-east-1.amazonaws.com/dcTrack.Docs/dcTrack_9.2.0_GA/dcTrack_9.2.0_Release_Notes.pdf

Check your stack JSON