CVE-2019-1000024: Opt-Net NG-Netms

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

OPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting (XSS) vulnerability in /js/libs/jstree/demo/filebrowser/index.php page. The "id" and "operation" GET parameters can be used to inject arbitrary JavaScript which is returned in the page's response that can result in Cross-site scripting.This attack appear to be exploitable via network connectivity.

Affected products

• Opt-Net NG-Netms: up to and including 3.6-2

Published 2019-02-04. Last modified 2026-06-17.