VulnerabilityAnalyzed
CVE-2024-9007
A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5.
MEDIUM 5.3EPSS 1.01%
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named 94bf9ab7ad0ccb7fbdc02f172f37f0e2ea08d48f. It is recommended to apply a patch to fix this issue.
- CVSS 4.0
- 5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- jeanmarc77/123solar
- Source
- cna@vuldb.com
References
- https://github.com/jeanmarc77/123solar/commit/94bf9ab7ad0ccb7fbdc02f172f37f0e2ea08d48fPatch
- https://github.com/jeanmarc77/123solar/issues/73Exploit, Third Party Advisory
- https://github.com/jeanmarc77/123solar/issues/73#issuecomment-2357648077Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.278163Permissions Required
- https://vuldb.com/?id.278163Third Party Advisory
- https://vuldb.com/?submit.408299Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.