Threats tagged 'ghsa-x3pm-6vfp-j66v'

Nagvis versions prior to 1.9.47 contain an input neutralization flaw that can lead to cross-site scripting (XSS) vulnerabilities. This vulnerability allows attackers to inject malicious scripts that may execute in the context of the affected application. The flaw affects confidentiality and integrity but does not impact availability. The issue is tracked as CVE-2024-47090 with a medium severity rating and a CVSS score of 6.1.