CVE-2024-28831
XSS in confirmation pop-up
Summary
XSS in confirmation pop-up
Original description
The description as published by the source.
Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up.
References
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com