← All advisories

Medium severity5.4NVD Advisory· Published Jun 28, 2024· Updated Jun 17, 2026

CVE-2024-37741

CVE-2024-37741

Description

OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Openplcproject/Openplc V3 Firmware
cpe:2.3:o:openplcproject:openplc_v3_firmware:-:*:*:*:*:*:*:*
Openplcproject/OpenPLCcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 9cd8f1b
Thiagoralves/Openplc V3llm-fuzzy
Range: 9cd8f1b

Patches

Vulnerability mechanics

References

3

1d8.github.io/cves/cve_2024_37741/nvdExploit
github.com/thiagoralves/OpenPLC_v3/issues/242nvdExploitIssue Tracking
github.com/thiagoralves/OpenPLC_v3/blob/9cd8f1b53a50f9d38708096bfc72bcbb1ef47343/webserver/pages.pynvdProduct

News mentions

0

No linked articles in our index yet.