What’s Vulnerable › Vulnerabilities

CVE-2024-8328: HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-30 · updated 2026-06-17
• Weakness: CWE-79

Description

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.

Affected products

• HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform: before 24a01 — fixed in 24a01

How to fix

Upgrade to a fixed version: HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform 24a01. Check the vendor advisory for mitigations.

References

• https://www.twcert.org.tw/en/cp-139-8033-0a98f-2.html
• https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html

Get alerted when CVE-2024-8328 or the next vulnerability affects your stack