CVE-2024-34749 | THREATINT

Description

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user.

Reserved 2024-05-08 | Published 2024-05-13 | Updated 2024-08-02 | Assigner jpcert

Problem types

Cross-site scripting (XSS)

Product status

prior to version 3.35

affected

References

p.horm.org/er/

github.com/eyedean/phormer

sourceforge.net/projects/rephormer/

jvn.jp/en/jp/JVN61054671/

cve.org (CVE-2024-34749)

nvd.nist.gov (CVE-2024-34749)

Download JSON