VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 18, 2025· Updated Jun 17, 2026

CVE-2024-56882

CVE-2024-56882

Description

Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with the modified data elements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Sagedpw/Sage Dpw
    cpe:2.3:a:sagedpw:sage_dpw:*:*:*:*:*:*:*:*
    Range: <2024_12_000
  • Sage/Sagecpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <2024_12_000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.