VULNERABILITY INTELLIGENCE

CVE-2024-6528

CVSS score6.1 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2024-07-11

Last modified2026-06-17

Description

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.