CVE-2024-51091

MEDIUM 5.4EPSS 0.4%

Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package

CVSS v4.0: 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P
CVSS v3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.41% chance of exploitation in the next 30 days, 35th percentile
Published: 2025-03-03
Updated: 2025-03-04

Proof-of-concept exploits (1)

https://gist.github.com/jackfromeast/176413c3bd73f825f7aeeb05e80e02a6

References

Related