CVE-2024-6742: AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and…

PriorityP424medium5.4CVSS 3.1

AVNACLPRLUIRSCCLILAN

EPSS

0.29%

20.3th percentile

AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
aguardnet	space_management_system	>= all < 2024-04-09-3302	2024-04-09-3302
space_management_system_project	space_management_system	< 2024-04-09-3302	2024-04-09-3302

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.