CVE-2024-34398

MEDIUM Year: 2024
CVSS v3 Score
4.2
Medium
Weakness Type
CWE-80
View all →

Vulnerability Description

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.

Related Vulnerabilities

CVE-2023-45053

MEDIUM
CVSS:4.3(Medium)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue ...

CWE-802023

CVE-2024-32790

MEDIUM
CVSS:4.3(Medium)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Supsystic Pricing Table by Supsystic allows Code Injection.This issue affects Pricing Table by Supsystic:...

CWE-802024

CVE-2024-35112

MEDIUM
CVSS:4.3(Medium)

IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in f...

CWE-802024

CVE-2024-6108

MEDIUM
CVSS:4.3(Medium)

A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/vood_view.cgi?act=inde...

CWE-802024

CVE-2025-32230

MEDIUM
CVSS:4.3(Medium)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0.

CWE-802025

CVE-2025-29430

MEDIUM
CVSS:4.1(Medium)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.php via the id and rome parameters.

CWE-802025