CVE-2024-8776

published 2024-09-16

CVE-2024-8776: SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the…

Priority P4 22 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
intumit	smartrobot	< 7.1.0	7.1.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79