CVE-2024-8750

6.1 mediumEPSS 0.2%

Medium (6.1) in i-doit i-doit. EPSS 0.2% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters (id,lang,mNavID,name,pID,treeNode,type,view).

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

i-doit:i-doit

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-synetics-idoit-pro

Check your stack JSON