VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 17, 2024· Updated Jun 17, 2026

CVE-2024-37623

CVE-2024-37623

Description

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component.

Affected products

3
  • Xinhu/Rockoallm-fuzzy2 versions
    =2.6.3+ 1 more
    • (no CPE)range: =2.6.3
    • (no CPE)
  • Rockoa/Xinhu
    cpe:2.3:a:rockoa:xinhu:2.6.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.