Threats tagged 'ghsa-cw9p-3fjg-gh3r'

A cross-site scripting (XSS) vulnerability exists in Linux Foundation Magma up to version 1.9.0 in the handleReact function of the nms/server/main/routes.ts file within the NMS component. This vulnerability allows remote attackers to inject malicious scripts. Public exploit code is available, but the vendor has not responded to the disclosure. The vulnerability has a low CVSS score of 2.4.