CVE-2024-28112

Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-79
• CWE-79

• https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2wVendor Advisory
• https://owasp.org/www-community/attacks/xssNot Applicable
• https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2wVendor Advisory
• https://owasp.org/www-community/attacks/xssNot Applicable

Published

Mar 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28107phpMyFAQ is an open source FAQ web application for PHP 8.1+ …8.8
• CVE-2024-28108phpMyFAQ is an open source FAQ web application for PHP 8.1+ …6.1
• CVE-2024-28109veraPDF-library is a PDF/A validation library. Executing pol…8.1
• CVE-2024-2811A vulnerability was found in Tenda AC15 15.03.20_multi and c…9.8
• CVE-2024-28110Go SDK for CloudEvents is the official CloudEvents SDK to in…7.5
• CVE-2024-28111Canarytokens helps track activity and actions on a network. …6.5
• CVE-2024-28113Peering Manager is a BGP session management tool. In Peering…6.1
• CVE-2024-28114Peering Manager is a BGP session management tool. There is a…9.1
• CVE-2024-28115FreeRTOS is a real-time operating system for microcontroller…7.8
• CVE-2024-28116Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28117Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28118Grav is an open-source, flat-file content management system.…8.8