Vulnerability Details CVE-2024-48392
OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lack of input validation, which could lead to account takeover.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.6%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2024-48392
-
cpe:2.3:a:orangescrum:orangescrum:2.0.11