CVE-2024-7873

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-7873
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting (XSS), Exploit Script-Based APIs, XSS Through HTTP Headers. This issue affects Veribase Order: before v4.010.3.
CVSS

No CVSS.

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1485
https://www.usom.gov.tr/bildirim/tr-24-1485
Configurations

No configuration.

History

02 Jun 2026, 10:16

Type Values Removed Values Added
Summary (en) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting (XSS), Exploit Script-Based APIs, XSS Through HTTP Headers.This issue affects Veribase Order: before v4.010.3. (en) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting (XSS), Exploit Script-Based APIs, XSS Through HTTP Headers. This issue affects Veribase Order: before v4.010.3.
References
  • () https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1485 -

20 Sep 2024, 12:30

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web (XSS o 'Cross-site Scripting'), codificación o escape inadecuados de la salida, CWE - 83 Vulnerabilidad de neutralización inadecuada de la secuencia de comandos en los atributos de una página web en Veribilim Software Veribase Order permite XSS almacenado, cross site scripting (XSS), explotación de API basadas en secuencias de comandos, XSS a través de encabezados HTTP. Este problema afecta a Veribase Order: antes de v4.010.3.

17 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-17 13:15

Updated : 2026-06-02 10:16

NVD link : CVE-2024-7873

Mitre link : CVE-2024-7873

CVE.ORG link : CVE-2024-7873

JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-116

Improper Encoding or Escaping of Output