THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-28734

Reserved:2024-03-08
Published:2024-03-19
Updated:2024-06-10

Description

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter.

References

https://packetstormsecurity.com/files/177619/Financials-By-Coda-Cross-Site-Scripting.html

https://www.unit4.com/

https://www.unit4.com/products/financial-management-software

cve.org CVE-2024-28734

nvd.nist.gov CVE-2024-28734

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-28734