| |
Vulnerability CVE-2024-22397
Published: 2024-03-14
| Description: |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0005
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
