Threats affecting United States

545 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.3%	CVE-2024-48535esoft_planner_cve · A Stored Cross-site Scripting (XSS) Medium6.1EPSS 0.3%2024-11-20CVE Database V5CVE-2024-48535 A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter. EPSS 0.3%Vulnerability CWE-79 United States	CVE Database V5	2024-11-20
Medium	6.1	EPSS 0.4%	CVE-2024-48534eSoft Planner · Cross-site Scripting Medium6.1EPSS 0.4%2024-11-20CVE Database V5CVE-2024-48534 A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. EPSS 0.4%Vulnerability CWE-79 United States	CVE Database V5	2024-11-20
Medium	5.3	EPSS 0.4%	CVE-2024-48533 · Incorrect Default Permissions Medium5.3EPSS 0.4%2024-11-20CVE Database V5 A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts. EPSS 0.4%Vulnerability CWE-276 United States	CVE Database V5	2024-11-20
Medium	6.1	EPSS 0.4%	CVE-2024-48531eSoft Planner · Cross-site Scripting Medium6.1EPSS 0.4%2024-11-20CVE Database V5CVE-2024-48531 A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. EPSS 0.4%Vulnerability CWE-79 United States	CVE Database V5	2024-11-20
High	7.5	EPSS 0.6%	CVE-2024-48530eSoft Planner · Unthrottled Resource Allocation High7.5EPSS 0.6%2024-11-20CVE Database V5CVE-2024-48530 An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POST request. EPSS 0.6%Vulnerability CWE-770 United States	CVE Database V5	2024-11-20

Page 28 of 28