Description
The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in /Apps/TOPqw/qwStammdaten.aspx, is vulnerable to persistent Cross-Site Scripting (XSS).
References (1)
Core 1
Core References
Various Sources
https://cyber.wtf/2024/11/11/topqw-webportal-cves/
Scores
CVSS v3
5.4
EPSS
0.0028
EPSS Percentile
20.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Published
Nov 13, 2024
Tracked Since
Feb 18, 2026