CVE-2024-50857: Gestioip

Medium severity, CVSS 4.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.

Affected products

• Gestioip Gestioip: version 3.5.7 only

Published 2025-01-14. Last modified 2026-06-17.