CVE-2024-43024

MEDIUM 6.1CVE-2024-43024 · Published 18/09/2024 · updated 17/06/2026

In short

CVE-2024-43024 is a MEDIUM (CVSS 6.1) vulnerability affecting multitrans (rws).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
multitrans rws	`≤ 7.0.23324.2`	No fix yet

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

References

community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases · Release Notes
Sharpe-nl/CVEs · Third Party Advisory
tomdantuma/CVE · Third Party Advisory

More vulnerabilities in multitrans

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free