CVE-2024-11348

N/A

Descricao

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado1/27/2025

Ultima modificacao1/27/2025

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-79

Referencias

https://cert.pl/en/posts/2025/01/CVE-2024-11348(cvd@cert.pl)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.