Vulnerability CVE-2023-24724
Published: 2023-04-03   Modified: 2023-04-04

Description:
A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields.

 References:
https://medium.com/@williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c
https://owasp.org/www-community/attacks/xss/
Copyright 2026, cxsecurity.com

 

Back to Top