https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:42:10 +0000 https://cve.radiocsirt.org/vuln/cve-2024-36498 <p><strong>Affected:</strong> Image Access GmbH Scan2Net</p> <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> <p><strong>Affected:</strong> Image Access GmbH Scan2Net</p> <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> https://cve.radiocsirt.org/vuln/cve-2024-36498