CVE-2024-8328

MEDIO 5.4CVE-2024-8328 · Published 30/08/2024 · updated 17/06/2026

En resumen

CVE-2024-8328 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a easy test online learning and testing platform (easy test online learning and testing platform project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.29%, mayor que el 21.9% de las vulnerabilidades.
Solución: actualizar a 24a01 o posterior.

Package	Affected versions	Patched versions
easy test online learning and testing platform easy_test_online_learning_and_testing_platform_project	`< 24a01`	`24a01`

Description

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.

References

twcert.org.tw/en/cp-139-8033-0a98f-2.html · Vendor Advisory
twcert.org.tw/tw/cp-132-8028-360e1-1.html · Vendor Advisory

Más vulnerabilidades de easy test online learning and testing platform

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free