← Database

CVE-2024-48392

MEDIUM CVSS: 5.4 Published: 2025-01-21 Modified: 2026-06-17

Description

OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lack of input validation, which could lead to account takeover.

Affected Platforms

Orangescrum Orangescrum

Weakness Type

CWE-79

References