2 matches found
CVE-2024-48239
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
4.8CVSS0.0025EPSS
SaveExploits1References1
CVE-2024-48239: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
4.8CVSS5.8AI score0.0025EPSS
SaveExploits1References1
20