Cross-Site Scripting Vulnerability in PublicCMS by Sanluan
CVE-2024-46410

Currently unrated

Key Information:

Vendor: Sanluan
Status: PublicCMS
Vendor: CVE Published:; 8 October 2024

What is CVE-2024-46410?

A cross-site scripting (XSS) vulnerability has been identified in PublicCMS version 4.0.202406.d. This flaw allows attackers to execute malicious scripts through the Category Management feature. By submitting crafted input, an attacker could potentially manipulate users interacting with the affected feature, compromising user data and system integrity. Immediate remediation is advised to prevent exploitation.

References

https://gitee.com/sanluan/PublicCMS

https://github.com/trengh222/publiccms_xss

Timeline

Vulnerability published
Oct 8, 2024
Vulnerability Reserved
Sep 11, 2024

JSON