CVE-2024-28803

Cross-site scripting (XSS) vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameter

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.34% chance of exploitation in the next 30 days, 27th percentile

Published

2025-03-13

Updated

2025-03-19

Proof-of-concept exploits (1)

• https://www.gruppotim.it/it/footer/red-team.html

References

• CVE Record
• NVD entry

Related

• CVE-2024-2880
• CVE-2024-28804
• CVE-2024-2879
• CVE-2024-2884
• CVE-2024-28784
• CVE-2024-28847