VULNERABILITY INTELLIGENCE
CVE-2024-12223
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-08-20
Last modified2026-06-17
Description
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
Weakness classification
- vdp@themissinglink.com.au: CWE-79