CVE-2024-10412

MEDIO 5.4CVE-2024-10412 · Published 27/10/2024 · updated 17/06/2026

In breve

CVE-2024-10412 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda guns-medial (poco-z).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 35.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
guns-medial poco-z	`= 1.0`	No fix yet

Description

A vulnerability was found in Poco-z Guns-Medical 1.0. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /mgr/upload of the component File Upload. The manipulation of the argument picture leads to cross site scripting. The attack can be launched remotely.

References

Poco-z/Guns-Medical · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free