idcCMS V1.60 - Cross-Site Scripting

idcCMS V1.60 is vulnerable to reflected cross-site scripting XSS via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2024-11587 info: name: idcCMS V1.60 - Cross-Site Scripting author: ritikchaddha severity:...

CVE-2024-11587

creationtimestamp| type| source ---|---|--- 2024-11-21 12:32:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113520958826476639 2025-07-16 13:29:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-11587.yaml 2025-07-17...