CVE-2024-24397
Cross-site scripting in Stimulsoft Dashboards.js
CVSS score
5.4
EPSS probability
%0.8
Risk score
0.0
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
NVD reference
https://cves.at/posts/cve-2024-24397/writeup/
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2024-24398Path traversal in Stimulsoft Dashboards.php
Patch status unknown Public Exploits:1EPSS %2
9.8
CVE-2023-25261Code injection in Stimulsoft Designer
Patch status unknownEPSS %2
7.5
CVE-2023-25262Server-side request forgery in Stimulsoft Designer
Patch status unknown Public Exploits:1EPSS %1
7.5
CVE-2023-25260Vulnerability in Stimulsoft Designer
Patch status unknown Public Exploits:1EPSS %1
6.1
CVE-2024-24396Cross-site scripting in Stimulsoft Dashboard.js
Patch status unknown Public Exploits:1EPSS %1
5.5
CVE-2023-25263Vulnerability in Stimulsoft Designer
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-24397"