CVE-2024-5961 – Reflected XSS in 2ClickPortal

https://notcve.org/view.php?id=CVE-2024-5961

14 Jun 2024 — Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4. La neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web en el software 2ClickPortal permite cross-site scripting (XSS) reflejado. Un at... • https://github.com/kac89/CVE-2024-5961 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •