Cross Site Scripting Vulnerability in Sanluan PublicCMS Tag Type Handler

CVE-2024-11070

What is CVE-2024-11070?

A vulnerability has been identified in the Tag Type Handler of Sanluan PublicCMS 5.202406.d, allowing remote attackers to exploit cross site scripting. By manipulating specific arguments, an attacker can inject malicious scripts, which may be executed in the context of users accessing the compromised admin file. This exposure poses significant risks to the integrity and confidentiality of user interactions with the application. The vulnerability has been publicly disclosed, highlighting an urgent need for remediation.

References