CVE-2024-7938

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Sep 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-79395.4A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute CVE-2024-79409.8The product exposes a service that is intended for local only to all network interfaces without any authentication.CVE-2024-79414.3An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying theCVE-2024-79425.4A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown coCVE-2024-79438.8A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the functionCVE-2024-79448.8A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the functiCVE-2024-79455.4A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnCVE-2024-79469.8A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is CVE-2024-79479.8A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an CVE-2024-79485.4A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of tCVE-2024-79498.8A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknoCVE-2024-79509.8The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Local File Inclusio
CVE-2024-7938: Medium severity, CVSS 5.4 | Vulnix