CVE-2024-41514

5.4 mediumEPSS 0.4%

Medium (5.4) in 4pace cadclick. EPSS 0.4% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

4pace:cadclick

References

http://cadclick.de/
http://kimweb.de/
https://piuswalter.de/blog/multiple-critical-vulnerabilities-in-cadclick/

Check your stack JSON