CyberRota Analysis
AI-GeneratedA reflected Cross-Site Scripting (XSS) vulnerability exists in the pages/tagadmin.php component of Combodo iTop prior to version 3.2.3, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or other malicious actions against users of the IT service management tool. Organizations using affected versions should prioritize updating to version 3.2.3 to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in pages/tagadmin.php. This issue has been fixed in version 3.2.3.