CVE-2024-5961 – Reflected XSS in 2ClickPortal

https://notcve.org/view.php?id=CVE-2024-5961

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4. La neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web en el software 2ClickPortal permite cross-site scripting (XSS) reflejado. Un atacante podría engañar a alguien para que utilice una URL manipulada, lo que provocará que se ejecute un script en el navegador del usuario. • https://github.com/kac89/CVE-2024-5961 https://2clickportal.pl https://cert.pl/en/posts/2024/06/CVE-2024-5961 https://cert.pl/posts/2024/06/CVE-2024-5961 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •