Lucene search
HistoryFeb 02, 2024 - 10:15 a.m.
CVE-2024-24388
cross-site scripting
xunruicms
remote attackers
sensitive information
malicious requests
login
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
27.8%
Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.
Affected configurations
Node
xunruicmsxunruicmsRange≤4.6.2
References
Related
prion
prion
Cross site scripting
2024-02-02 10:15:00
cvelist
cvelist
CVE-2024-24388
2024-02-02 00:00:00
vulnrichment
vulnrichment
CVE-2024-24388
2024-02-02 00:00:00
cve
cve
CVE-2024-24388
2024-02-02 10:15:08
cnvd
cnvd
XunRuiCMS Cross-Site Scripting Vulnerability (CNVD-2024-12713)
2024-02-06 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
27.8%
Related for NVD:CVE-2024-24388