CVE-2024-55199

Published: 2025-03-10T18:15Z

Last Modified: 2025-03-10T18:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, the injected code is executed on the user's browser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt