6.1
CVSSv3

CVE-2024-10332

CVSSv4: NA | CVSSv3: 6.1 | CVSSv2: NA | VMScore: 710 | EPSS: 0.00037 | KEV: Not Included
Published: 24/10/2024 Updated: 25/10/2024

Vulnerability Summary

Cross-Site Scripting in Impronta Janto v4.3r11 Exploited

Janto v4.3r11 from Impronta has a Cross-Site Scripting (XSS) vulnerability. This flaw lets an attacker run JavaScript code in a victim's browser. The attacker can do this by sending a harmful URL using the "/abonados/public/janto/main.php" endpoint.