CVE-2024-7130 - Reflected XSS in Kion Computer's KION Exchange Programs Software

Back Back to CVE browser

MEDIUM

Reflected XSS in Kion Computer's KION Exchange Programs Software

Published Nov 21, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.37%

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS.

This issue affects KION Exchange Programs Software: before 1.21.9092.29966.

Affected products

Vendor Kion Computer Product KION Exchange Programs Software Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.21.9092.29966

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Kion Computer

KION Exchange Programs Software

unaffected

Version	Status	Constraints
0	affected	<1.21.9092.29966

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48831
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1867
government-resource
https://www.usom.gov.tr/bildirim/tr-24-1867
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48831		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1867		government-resource
https://www.usom.gov.tr/bildirim/tr-24-1867		government-resourcebroken-link