CVE-2024-33424

A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section.
Configurations

No configuration.

History

03 Jul 2024, 01:58

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de Cross Site Scripting (XSS) en el menú Configuración de CMSimple v5.15 permite a los atacantes ejecutar script web o HTML arbitrarios a través de un payload manipulado inyectado en el parámetro Descargas en la sección Idioma.
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1

01 May 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-01 19:15

Updated : 2024-07-03 01:58


NVD link : CVE-2024-33424

Mitre link : CVE-2024-33424

CVE.ORG link : CVE-2024-33424


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')