CVE-2024-24571

MEDIUM

facilemanager < 4.5.1 - Stored Cross-Site Scripting via Input Fields

Title source: llm
STIX 2.1

Description

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

References (2)

Core 2

Scores

CVSS v3 5.4
EPSS 0.0042
EPSS Percentile 34.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-80
Status published
Products (1)
facilemanager/facilemanager < 4.5.1
Published Jan 31, 2024
Tracked Since Feb 18, 2026