CVE-2024-41515

Published: 2024-10-04T18:15Z

Last Modified: 2024-10-07T19:37Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt