Cross Site Scripting Flaw in LinZhaoguan pb-cms 2.0

CVE-2024-51229

What is CVE-2024-51229?

A Cross Site Scripting vulnerability exists in LinZhaoguan pb-cms version 2.0 that permits remote attackers to execute arbitrary code. This vulnerability is exploited through the theme management function, where user inputs are not properly sanitized. As a result, an attacker can inject malicious scripts, potentially compromising user sessions and manipulating web page content. It is crucial for administrators to apply updates and implement proper input validation measures to mitigate this threat.

References