VULNERABILITY INTELLIGENCE
CVE-2024-2259
EPSS probability0.50%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
Description
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system.
Weakness classification
- vdisclose@cert-in.org.in: CWE-79