← Database

CVE-2024-8457

MEDIUM CVSS: 4.8 Published: 2024-09-30 Modified: 2026-06-17

Description

Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject arbitrary JavaScript, leading to Stored XSS attack.

Affected Platforms

Planet Gs-4210-24P2SPlanet Gs-4210-24Pl4C FirmwarePlanet Gs-4210-24P2S FirmwarePlanet Gs-4210-24Pl4C

Weakness Type

CWE-79

References