VDB
CVE-2024-57348
CVE-2024-57348
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Cross Site Scripting vulnerability in PecanProject pecan v.1.7.2 allows a remote attacker to execute arbitrary code via the crafted payload to the hostname, sitegroupid, lat, lon and sitename parameters.
EPSS 0.60% · 70.0th percentile
Risk Scores
CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.60%
70.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| pecanproject | pecan | 0 |
| n/a | n/a | n/a |
Timeline
- Mar 13, 2025 CVE Published
- Mar 13, 2025 Coalition ESS Score
- Mar 14, 2025 EPSS Score
- Mar 18, 2025 CVE Updated
- Mar 19, 2025 Coalition ESS Score
- Mar 28, 2025 EPSS Score
- Apr 6, 2025 Coalition ESS Score
- Apr 10, 2025 EPSS Score
- Apr 24, 2025 EPSS Score
- May 7, 2025 EPSS Score
- May 21, 2025 EPSS Score
- Jun 3, 2025 EPSS Score