CVE-2024-24396

MediumCVSS 6.1

Published: 05/02/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

53th percentile - higher than 53% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in Stimulsoft Dashboard.JS before version 2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload in the search bar component.

Risk Assessment

An attacker can steal session data, redirect the user to a malicious site, or perform other unauthorized actions within the victim's browser context.

Recommendation

Immediately update Stimulsoft Dashboard.JS to version 2024.1.2 or later and apply input filtering on the search bar component.

Original NVD description (English source)

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.