Cross Site Scripting Vulnerability in ZZCMS by ZZCMS
CVE-2024-44819

6.1MEDIUM

Key Information:

Vendor

Zzcms

Status
Zzcms
Vendor
CVE Published:
4 September 2024

What is CVE-2024-44819?

A Cross Site Scripting vulnerability exists in ZZCMS versions 2023 and earlier, enabling potential remote attackers to execute arbitrary scripts. By manipulating the pagename parameter in the admin/del.php component, an attacker can extract sensitive information from users, raising significant security concerns for web applications utilizing this CMS. Web administrators are advised to implement necessary security precautions to mitigate this risk.

References

https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.