Vulnerabilities > Hyland > Alfresco Content Services > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-20 CVE-2024-40347 Cross-site Scripting vulnerability in Hyland Alfresco Content Services 7.2.0
A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid.
network
low complexity
hyland CWE-79
6.1