TVN ID | TVN-202408008 |
---|---|
CVE ID | CVE-2024-8328 |
CVSS | 5.4(Medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected Products | Easy test Online Learning and Testing Platform before version 24A01. |
Description | Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks. |
Solution | Update to version 24A01 or later. |
Credit | TaiYou |
Public Date | 2024-08-30 |