Security Advisory
CVE-2024-27627
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the bad_password.php page.