Cross-Site Scripting Vulnerability in PublicCMS by Sanluan
CVE-2024-46410

4.8MEDIUM

Key Information:

Vendor

Sanluan

Status
PublicCMS
Vendor
CVE Published:
8 October 2024

What is CVE-2024-46410?

A cross-site scripting (XSS) vulnerability has been identified in PublicCMS version 4.0.202406.d. This flaw allows attackers to execute malicious scripts through the Category Management feature. By submitting crafted input, an attacker could potentially manipulate users interacting with the affected feature, compromising user data and system integrity. Immediate remediation is advised to prevent exploitation.

References

https://gitee.com/sanluan/PublicCMS
https://github.com/trengh222/publiccms_xss

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.