CVE-2024-42834

Published: 2024-11-13T20:15Z

Last Modified: 2024-11-18T20:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC) UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt