What is the severity of CVE-2024-8942?

CVE-2024-8942 has been classified as a high-severity vulnerability due to its potential for remote exploitation via XSS.

How do I fix CVE-2024-8942?

To fix CVE-2024-8942, update to a secure version of Scriptcase that addresses the input validation issues.

What software is affected by CVE-2024-8942?

CVE-2024-8942 affects Scriptcase version 9.4.019, which has vulnerabilities related to cross-site scripting.

What type of attack does CVE-2024-8942 enable?

CVE-2024-8942 enables cross-site scripting (XSS) attacks, allowing attackers to execute scripts in the context of a user's session.

Who can exploit CVE-2024-8942?

CVE-2024-8942 can be exploited by remote attackers who can craft a malicious URL to target victims.

Vulnerability/
CVE-2024-8942

high

8.2

CWE

79 20

EPSS

0.087%

24/9/2024

30/9/2024

CVE-2024-8942: Cross-site Scripting vulnerability on Scriptcase

First published: Tue Sep 24 2024(Updated: )

Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting the “id_form_msg_title” parameter, among others. This vulnerability could allow a remote user to send a specially crafted URL to a victim and retrieve their credentials.

Credit: cve-coordination@incibe.es

Affected Software	Affected Version	How to fix
Scriptcase	=9.4.019

Remedy

The vulnerability has been fixed in the latest version.

Never miss a vulnerability like this again

Reference Links

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-scriptcase

Frequently Asked Questions

What is the severity of CVE-2024-8942?
CVE-2024-8942 has been classified as a high-severity vulnerability due to its potential for remote exploitation via XSS.
How do I fix CVE-2024-8942?
To fix CVE-2024-8942, update to a secure version of Scriptcase that addresses the input validation issues.
What software is affected by CVE-2024-8942?
CVE-2024-8942 affects Scriptcase version 9.4.019, which has vulnerabilities related to cross-site scripting.
What type of attack does CVE-2024-8942 enable?
CVE-2024-8942 enables cross-site scripting (XSS) attacks, allowing attackers to execute scripts in the context of a user's session.
Who can exploit CVE-2024-8942?
CVE-2024-8942 can be exploited by remote attackers who can craft a malicious URL to target victims.

agent/title
agent/weakness
agent/references
agent/remedy
agent/description
agent/type
agent/first-publish-date
agent/author
agent/event
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/softwarecombine
agent/trending
collector/epss-latest
source/FIRST
agent/epss
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/scriptcase
canonical/scriptcase
version/scriptcase/9.4.019

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.