CVE-2024-10652: Changing Information Technology Idexpert

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks.

Affected products

• Changing Information Technology Idexpert: from 2.5, up to and including 2.8

Published 2024-11-01. Last modified 2026-06-17.