Lucene search

K

[email protected]CVE-2024-31741

HistoryApr 26, 2024 - 10:15 p.m.

CVE-2024-31741

2024-04-2622:15:08

[email protected]

web.nvd.nist.gov

27

cve-2024-31741

remote attacker

arbitrary code

crafted string

url

login

nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login.

References

github.com/bg5sbk/MiniCMS/issues/49

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVE-2024-31741