{"cvss":6.1,"datePublished":"","dateUpdated":"","description":"KEVIntel entry: Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET... | Affected: n/a / n/a | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2024-28734","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"n/a","severity":"MEDIUM","source":"circl_kev","title":"CVE-2024-28734","vendor":""}