CVE-2024-31122

MediumCVSS 5.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2.

Metrics

CVSS 3.1 5.8/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Prism IT Systems	User Rights Access Manager	<= 1.1.2

References

Timeline

Published: Mar 31, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-311237.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected X CVE-2024-311277.3An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their priv CVE-2024-31135.9The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escap CVE-2024-311346.5In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registratio CVE-2024-311356.1In JetBrains TeamCity before 2024.03 open redirect was possible on the login page CVE-2024-311367.4In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter CVE-2024-311376.1In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration CVE-2024-311385.4In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings CVE-2024-311398.1In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector CVE-2024-31146.5An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to CVE-2024-311404.9In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools CVE-2024-311416.5Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clie