CVE-2024-10412

MEDIUM 5.4CVE-2024-10412 · Published 27/10/2024 · updated 17/06/2026

In short

CVE-2024-10412 is a MEDIUM (CVSS 5.4) vulnerability affecting guns-medial (poco-z).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
guns-medial poco-z	`= 1.0`	No fix yet

Description

A vulnerability was found in Poco-z Guns-Medical 1.0. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /mgr/upload of the component File Upload. The manipulation of the argument picture leads to cross site scripting. The attack can be launched remotely.

References

Poco-z/Guns-Medical · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free