CVE-2024-32492

HIGH

Znuny 7.0.1-7.0.16 - Stored Cross-Site Scripting in Customer Ticket Detail View

Title source: llm
STIX 2.1

Description

An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.

References (2)

Core 2
Core References

Scores

CVSS v3 7.1
EPSS 0.0053
EPSS Percentile 40.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-94
Status published
Products (1)
znuny/znuny 7.0.1 - 7.0.16
Published Apr 29, 2024
Tracked Since Feb 18, 2026