Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-8652

Netcat CMS: reflected cross-site scripting in openstat module

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Kaspersky

Description

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetCat NetCat CMS

Default version status: unknown

  • 6.4.0.24126.2affected
  • 6.4.0.24248unaffected

References