VYPR
Medium severity6.1NVD Advisory· Published Jun 17, 2024· Updated Jun 17, 2026

CVE-2024-37623

CVE-2024-37623

Description

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component.

Affected products

2
  • Xinhu/Rockoacpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =2.6.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.