Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-8776

INTUMIT SmartRobot - Cross-site Scripting

Description

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

INTUMIT SmartRobot

Default version status: unaffected

  • 0 to < 7.1.0affected

References