Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2024-25506

Description

Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pm_sys_sys cookie.

POC

Reference

- https://medium.com/@proflamyt/cve-2024-25506-425ba3212fb6

Github

- https://github.com/zhanpengliu-tencent/medium-cve