CVE-2024-32405

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to...

2.6 Low

CVE-2024-32405 is a low vulnerability (CVSS 2.6) in Inducer Relate, published April 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. No source names a fixed version.

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: None

Exploit likelihood

0.50%Up 0.5 points since Apr 23, 2024

What each source reports

CVE List Score used 2.6

Record: CVE-2024-32405
CVSS 3.1: 2.6 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-79
Updated: 2026-11-02

EUVDEUVD-2024-30223 2.6

Record: EUVD-2024-30223
CVSS 3.1: 2.6 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hgxr-xh47-wjx5 2.6

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to...

Record: GHSA-hgxr-xh47-wjx5
CVSS 3.1: 2.6 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-79
Updated: 2026-11-02

NVD 2.6

Record: CVE-2024-32405
CVSS 3.1: 2.6 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-79
Updated: 2026-11-02

Affected products

inducer relate

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD