Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.

This issue affects Panel: before v2.3.24.
Published: 2024-09-18
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-47869 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24.
History

Wed, 03 Jun 2026 14:30:00 +0200

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS. This issue affects Panel: before v2.3.24.
References

Tue, 15 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.00065}

 epss

{'score': 0.00077}

Wed, 25 Sep 2024 21:15:00 +0200

Type Values Removed Values Added
First Time appeared Elizsoftware
Elizsoftware panel
CPEs cpe:2.3:a:elizsoftware:panel:*:*:*:*:*:*:*:*
Vendors & Products Elizsoftware
Elizsoftware panel
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Wed, 18 Sep 2024 20:30:00 +0200

Type Values Removed Values Added
First Time appeared Eliz Software
Eliz Software panel
CPEs cpe:2.3:a:eliz_software:panel:*:*:*:*:*:*:*:*
Vendors & Products Eliz Software
Eliz Software panel
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 18 Sep 2024 17:00:00 +0200

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24.
Title Reflected XSS in Eliz Software's Panel
Weaknesses CWE-79
References
Metrics cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Eliz Software Panel
Elizsoftware Panel
cve-icon MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published:

Updated: 2026-06-03T12:11:04.525Z

Reserved: 2024-07-18T08:24:39.302Z

Link: CVE-2024-6877

cve-icon Vulnrichment

Updated: 2024-09-18T17:56:59.446Z

cve-icon NVD

Status : Modified

Published: 2024-09-18T15:15:18.860

Modified: 2026-06-17T08:18:53.440

Link: CVE-2024-6877

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')