CVE-2024-56289
HIGH 7.1EPSS 0.7%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Groundhogg Inc. Groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through 3.7.3.3.
- CVSS v3.1
- 7.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L - EPSS
- 0.69% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2025-01-07
- Updated
- 2026-04-28
Proof-of-concept exploits (1)
- DoTTak/CVE-2024-562890★ · 2025-01-06