CVE-2024-37783

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx.

Published 2024-11-22. Last modified 2026-06-17.