CVE-2024-2633

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier. The endpoint '/sitetest/english/dumpenv.jsp' is vulnerable to XSS attack by 'lang' query, i.e. '/sitetest/english/dumpenv.jsp?snoop=yes&lang=%27%3Cimg%20src/onerror=alert(1)%3E&params'.

• CWE-79

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid
• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid

Published

Mar 19, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-26317In illumos illumos-gate 2024-02-15, an error occurs in the e…6.1
• CVE-2024-26318Serenity before 6.8.0 allows XSS via an email link because L…6.1
• CVE-2024-2632A Information Exposure Vulnerability has been found on Meta4…7.5
• CVE-2024-26327An issue was discovered in QEMU 7.1.0 through 8.2.1. registe…5.3
• CVE-2024-26328An issue was discovered in QEMU 7.1.0 through 8.2.1. registe…6
• CVE-2024-26329Chilkat before v9.5.0.98, allows attackers to obtain sensiti…6.2
• CVE-2024-26330An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on…6.5
• CVE-2024-26331ReCrystallize Server 5.10.0.0 uses a authorization mechanism…7.5
• CVE-2024-26333swftools v0.9.2 was discovered to contain a segmentation vio…5.5
• CVE-2024-26334swftools v0.9.2 was discovered to contain a segmentation vio…6.2
• CVE-2024-26335swftools v0.9.2 was discovered to contain a segmentation vio…5.5
• CVE-2024-26337swftools v0.9.2 was discovered to contain a segmentation vio…4.3