CVE-2024-27627: Supercali

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the bad_password.php page.

Affected products

• Supercali Supercali: version 1.1.0 only

Published 2024-03-05. Last modified 2026-06-17.