CVE-2024-45962

Published: 2024-10-02T20:15Z

Last Modified: 2024-10-04T13:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a crafted JavaScript to the target. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt