Medium severity5.4NVD Advisory· Published Mar 11, 2025· Updated Jun 17, 2026
CVE-2024-51322
CVE-2024-51322
Description
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmd_container.jsp components
Affected products
3cpe:2.3:a:zucchetti:ad_hoc_infinity:2.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zucchetti:ad_hoc_infinity:2.4:*:*:*:*:*:*:*
- (no CPE)range: <2.4
- (no CPE)
Patches
Vulnerability mechanics
References
1- members.backbox.org/zucchetti-ad-hoc-infinity-multiple-vulnerabilities/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.