Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-1883

Reflected XSS in PaperCut NG/MF

Description

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaperCut PaperCut NG, PaperCut MF

Default version status: affected

  • 0 to < 23.0.7affected
  • 0 to < 22.1.5affected
  • 0 to < 21.2.14affected
  • 0 to < 20.1.10affected

References