CVE-2024-46081: Scriptcase

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.

Affected products

• Scriptcase Scriptcase: up to and including 9.10.023

Published 2024-10-01. Last modified 2026-06-17.