Lucene search
HistoryMar 07, 2024 - 1:15 p.m.
CVE-2024-2245
cve-2024-2245
cross-site scripting
javascript payload
post request
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the ‘/install.php’ endpoint, a JavaScript payload could be executed in the ‘username’ parameter.
Related
cvelist
cvelist
CVE-2024-2245 Cross-Site Scripting vulnerability in moziloCMS
2024-03-07 13:10:55
prion
prion
Cross site scripting
2024-03-07 13:15:00
cve
cve
CVE-2024-2245
2024-03-07 13:15:07
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-2245