CVE-2024-3509: Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor

Published Jun 2, 2025

Updated

A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within the registry section. To exploit this vulnerability, a malicious actor must have a valid user account with administrative access to the Management Console. If successful, the actor could inject persistent JavaScript payloads, enabling the theft of user data or execution of unauthorized actions on behalf of other users.

While this issue enables persistent client-side script execution, session-related cookies remain protected with the httpOnly flag, preventing session hijacking.

Affected Software

14 affected components

WSO2 Multiple Products

WSO2 API Manager=3.2.0

WSO2 API Manager=3.2.1

WSO2 API Manager=4.0.0

WSO2 API Manager=4.1.0

WSO2 API Manager=4.2.0

WSO2 API Manager=4.3.0

WSO2 Enterprise Integrator=6.6.0

WSO2 Identity Server=5.10.0

WSO2 Identity Server=5.11.0

WSO2 Identity Server=6.0.0

WSO2 Identity Server=6.1.0

WSO2 Identity Server=7.0.0

WSO2 Identity Server as Key Manager=5.10.0

Remediation

Information

Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-2... https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-2701/#solution

Event History

Jun 2, 2025

CVE Published

via MITRE·04:44 PM

Data Sourced

via MITRE·04:44 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-3509?

CVE-2024-3509 has been classified as a high severity vulnerability due to its potential for stored cross-site scripting attacks.

How do I fix CVE-2024-3509?

To mitigate CVE-2024-3509, apply the latest security patches provided by WSO2 for the affected products.

What products are affected by CVE-2024-3509?

CVE-2024-3509 affects multiple products within the WSO2 ecosystem.

Who can exploit CVE-2024-3509?

A malicious actor with a valid user account can exploit CVE-2024-3509 by inserting harmful scripts.

What are the possible impacts of CVE-2024-3509?

The potential impacts of CVE-2024-3509 include unauthorized data access and the execution of malicious scripts in user browsers.