CVE-2024-40510

Published September 27th, 2024

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function.

openpetra/openpetra

OpenPetra is an administration software (CRM+ERP) for charities

GitHub

115