Cross Site Scripting Vulnerability in Alto CMS by Alto CMS Team
CVE-2024-42749

6.1MEDIUM

Key Information:

Vendor

Alto CMS Team

Status
Alto CMS
Vendor
CVE Published:
14 November 2025

What is CVE-2024-42749?

A Cross Site Scripting vulnerability has been identified in Alto CMS version 1.1.13, which allows local attackers to execute arbitrary code through a maliciously crafted script. This security flaw can lead to unauthorized actions and potentially compromise the integrity of the system. Users of this version are strongly advised to take necessary precautions and apply relevant updates to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/altocms/altocms
https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-42...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.