Lucene search
HistoryJul 05, 2024 - 2:15 a.m.
CVE-2024-34481
drupal
wiki
xss
comments
captions
image titles
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.8%
drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
Affected configurations
Node
kontextworkdrupal_wikiRange<8.31.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kontextwork | drupal_wiki | * | cpe:2.3:a:kontextwork:drupal_wiki:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-34481
2024-07-05 00:00:00
ubuntucve
ubuntucve
CVE-2024-34481
2024-07-05 00:00:00
osv
osv
CVE-2024-34481
2024-07-05 02:15:00
packetstorm
packetstorm
Drupal-Wiki 8.31 / 8.30 Cross Site Scripting
2024-05-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-34481
2024-07-05 00:00:00
cve
cve
CVE-2024-34481
2024-07-05 02:15:09
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.8%
Related for NVD:CVE-2024-34481