Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Prism Central: Stored Cross-Site Scripting in Events Component

CVE-2024-12223 · published 1 year ago
Summary

Prism Central versions prior to 2024.3.1 are affected. If not updated, an attacker can hijack a user's session and perform actions as the victim. Update to version 2024.3.1 or later to fix the issue.

Original advisory text
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions ...
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published20 Aug 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-12223 · NVD
Track software like this
Free during beta