CVE-2024-11348

N/A

Description

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

CVE Details

CVSS v3.1 ScoreN/A

Published1/27/2025

Last Modified1/27/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-79

References

https://cert.pl/en/posts/2025/01/CVE-2024-11348(cvd@cert.pl)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.