Medium severity5.4NVD Advisory· Published Sep 6, 2024· Updated Jun 17, 2026

CVE-2024-44837

Description

A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter.

Affected products

Drug/Drugdescription
Drug/Drugllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

kaput-raptorex-7c1.notion.site/drug-1-0-DOM-based-cross-site-scripting-fae620f769304f67a7488a961d048672nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000