What is CVE-2024-5961?

CVE-2024-5961 is a vulnerability in Trol Intermedia Sp. Z O.o. K. 2clickportal, classified under Cross-site Scripting. Published 2024-06-14.

Is CVE-2024-5961 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Trol Intermedia Sp. Z O.o. K. 2clickportal

CVE-2024-5961

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.013 (66.4th percentile) — read the EPSS interpretation.

Affected products

Trol Intermedia Sp. Z O.o. K. 2clickportal — versions 7.2.31

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

cvd@cert.pl (third-party-advisory)
cvd@cert.pl (third-party-advisory)
cvd@cert.pl (product)

Frequently asked questions

What is CVE-2024-5961?: CVE-2024-5961 is a vulnerability in Trol Intermedia Sp. Z O.o. K. 2clickportal, classified under Cross-site Scripting. Published 2024-06-14.
Is CVE-2024-5961 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.