Vulnerability Details CVE-2024-40347
A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.9%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-40347
-
cpe:2.3:a:hyland:alfresco_content_services:-
-
cpe:2.3:a:hyland:alfresco_content_services:7.2.0