Skip to content
Sign in
5.4 Medium

CVE-2024-6528 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…

Description

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.

Affected products and versions

Product Affected versions Fixed in
Modicon Controllers M241 / M251 Versions not published
Modicon Controllers M258 / LMC058 Versions not published
Modicon Controllers M262 Versions not published

Other CVEs of Modicon Controllers M241 / M251

The 3 CVEs of Modicon Controllers M241 / M251 →
CVE-2025-2875 CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of… 8.7 High CVE-2024-11737 CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of… 9.3 Critical
Track this CVE