CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2024-48870
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability.
If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sharp:bp-30c25_firmware
- sharp:bp-30c25t_firmware
- sharp:bp-30c25y_firmware
- sharp:bp-30c25z_firmware
- sharp:bp-30m28_firmware
- sharp:bp-30m28t_firmware
- sharp:bp-30m31_firmware
- sharp:bp-30m31t_firmware
- sharp:bp-30m35_firmware
- sharp:bp-30m35t_firmware
- sharp:bp-50c26_firmware
- sharp:bp-50c31_firmware
- sharp:bp-50c36_firmware
- sharp:bp-50c45_firmware
- sharp:bp-50c55_firmware
- sharp:bp-50c65_firmware
- sharp:bp-50m26_firmware
- sharp:bp-50m31_firmware
- sharp:bp-50m36_firmware
- sharp:bp-50m45_firmware
- sharp:bp-50m50_firmware
- sharp:bp-50m55_firmware
- sharp:bp-55c26_firmware
- sharp:bp-60c31_firmware
- sharp:bp-60c36_firmware
- sharp:bp-60c45_firmware
- sharp:bp-70c31_firmware
- sharp:bp-70c36_firmware
- sharp:bp-70c45_firmware
- sharp:bp-70c55_firmware
- sharp:bp-70c65_firmware
- sharp:bp-70m31_firmware
- sharp:bp-70m36_firmware
- sharp:bp-70m45_firmware
- sharp:bp-70m55_firmware
- sharp:bp-70m65_firmware
- sharp:bp-70m75_firmware
- sharp:bp-70m90_firmware
- sharp:bp-90c70_firmware
- sharp:bp-90c80_firmware
- sharp:bp-b537wr_firmware
- sharp:bp-b540wr_firmware
- sharp:bp-b547wd_firmware
- sharp:bp-b550wd_firmware
- sharp:bp-c533wd_firmware
- sharp:bp-c533wr_firmware
- sharp:bp-c535wd_firmware
- sharp:bp-c535wr_firmware
- sharp:bp-c542wd_firmware
- sharp:bp-c545wd_firmware