CVE-2024-51994

5.4 mediumEPSS 0.4%

Medium (5.4) in combodo itop. EPSS 0.4% chance of exploitation in the next 30 days.

Combodo iTop is a web based IT Service Management tool. In affected versions uploading a text file containing some java script in the portal will trigger an Cross-site Scripting (XSS) vulnerability. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-11-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

combodo:itop

References

https://github.com/Combodo/iTop/security/advisories/GHSA-jjph-c25g-5c7g

Check your stack JSON