← Database

CVE-2024-48937

MEDIUM CVSS: 6.1 Published: 2024-10-11 Modified: 2026-06-17

Description

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.

Affected Platforms

Znuny Znuny

Weakness Type

CWE-79, CWE-79

References