CVE-2024-27780

LOW Year: 2024
CVSS v3 Score
2.2
Low
Weakness Type
CWE-79
View all →

Vulnerability Description

Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.

Related Vulnerabilities

CVE-2022-4614

LOW
CVSS:2.3(Low)

Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11.

CWE-792022

CVE-2019-11281

LOW
CVSS:2.4(Low)

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the v...

CWE-792019

CVE-2022-0986

LOW
CVSS:2.4(Low)

Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.

CWE-792022

CVE-2023-0676

LOW
CVSS:2.4(Low)

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

CWE-792023

CVE-2023-7259

MEDIUM
CVSS:2.4(Low)

** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the component Adduser Page. The manipulation of the ...

CWE-792023

CVE-2024-10477

MEDIUM
CVSS:2.4(Low)

A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /admin#permissions of the component Permission Management Pag...

CWE-792024