CVE-2024-11348

N/A

Descripcion

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado1/27/2025

Ultima modificacion1/27/2025

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-79

Referencias

https://cert.pl/en/posts/2025/01/CVE-2024-11348(cvd@cert.pl)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.