CVE-2024-9672

MEDIUM

6.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-12-10

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.

Affected Platforms (CPE)

📦

Papercut

Papercut Mf

< 24.1.1

📦

Papercut

Papercut Ng

< 24.1.1

References & Advisories

🔗 https://www.papercut.com/kb/Main/security-bulletin-december-2024/

相关漏洞威胁

CVE-2026-6645

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for...

CVE-2025-97857.7

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and managem...

CVE-2023-394707.2

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remot...

CVE-2024-84056.1

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This s...