CVE-2024-25503

https://notcve.org/view.php?id=CVE-2024-25503

04 Apr 2024 — Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function. Una vulnerabilidad de Cross Site Scripting (XSS) en Advanced REST Client v.17.0.9 permite a un atacante remoto ejecutar código arbitrario y obtener información confidencial a través de un script manipulado para el parámetro de edición de detalles de la función New Project. • https://github.com/EQSTLab/CVE-2024-25503 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •