CVE-2024-50803

Currently unrated 🀨

Key Information

Vendor
CVE Published:
19 November 2024

Badges

πŸ‘Ύ Exploit Exists🟑 Public PoC

Summary

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

Timeline

  • Vulnerability published

  • 🟑

    Public PoC available

  • πŸ‘Ύ

    Exploit known to exist

Collectors

NVD Database1 Proof of Concept(s)
.