CVE-2024-12223

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
CVSS

No CVSS.

Configurations

No configuration.

History

20 Aug 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-20 01:15

Updated : 2025-08-20 01:15


NVD link : CVE-2024-12223

Mitre link : CVE-2024-12223


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')