CVE-2024-24388

2024-02-0200:00:00

mitre

www.cve.org

vulnerability

xss

xunruicms

remote attackers

sensitive information

malicious requests

background login

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

References

www.cnblogs.com/rxtycc/p/17948379