CVE-2024-5961

MEDIUM

2ClickPortal 7.2.31-7.6.4 - Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-5961. PoCs published by kac89.

AI-analyzed exploit summary This repository contains a proof-of-concept for a reflected XSS vulnerability in 2ClickPortal versions 7.2.31 through 7.6.4. The exploit leverages a malicious search query parameter to trigger an alert dialog via JavaScript injection.

Description

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.

Exploits (1)

nomisec WORKING POC
by kac89 · poc
https://github.com/kac89/CVE-2024-5961

This repository contains a proof-of-concept for a reflected XSS vulnerability in 2ClickPortal versions 7.2.31 through 7.6.4. The exploit leverages a malicious search query parameter to trigger an alert dialog via JavaScript injection.

Classification
Working Poc 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: 2ClickPortal versions 7.2.31 through 7.6.4
No auth needed
Prerequisites: Access to a vulnerable 2ClickPortal instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Various Sources third-party-advisory
https://cert.pl/en/posts/2024/06/CVE-2024-5961/
Various Sources third-party-advisory
https://cert.pl/posts/2024/06/CVE-2024-5961/
Various Sources product
https://2clickportal.pl/

Scores

CVSS v4 5.3
EPSS 0.0128
EPSS Percentile 66.4%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:X/U:Clear

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
Trol InterMedia Sp. z o.o. Sp. k./2ClickPortal 7.2.31 - 7.6.4
Published Jun 14, 2024
Tracked Since Feb 18, 2026