CVE Feed

    Dashboard / CVE / CVE-2024-2727

    CVE-2024-2727

    HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message.

    Published:Mar 22, 2024
    Last Modified:Oct 15, 2025
    EPS:Mar 22, 2024
    EPSS Score:0.0009
    CVSS Score:6.1

    Affected Products

    Vendor
    Atisoluciones
    Product
    Ciges
    Vendor
    Ciges
    Product
    Cigesv2

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-13596 (CVSS 2.7) — A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES…
    CVE-2024-2728 (CVSS 4.1) — Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to i…
    CVE-2024-2726 (CVSS 6.1) — Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to e…
    CVE-2024-2725 (CVSS 7.5) — Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/co…
    CVE-2024-2724 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' par…
    CVE-2024-2723 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' paramete…
    CVE-2024-2722 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The ex…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High