← Database

CVE-2024-48534

MEDIUM CVSS: 5.4 Published: 2024-11-20 Modified: 2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

Affected Platforms

Esoftplanner Esoft Planner

Weakness Type

CWE-79

References