CVE-2024-24389

creationtimestamp| type| source ---|---|--- 2024-03-07 03:26:40+00:00| seen| https://t.me/ctinow/202024 2024-03-07 03:32:11+00:00| seen| https://t.me/ctinow/202028 2025-03-27 21:27:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9228...

CVE-2024-24389

The CVE-2024-24389 entry concerns a cross-site scripting (XSS) vulnerability in XunRuiCMS versions up to 4.6.2. The flaw arises from a crafted payload injected into the Add Column Name parameter, allowing attackers to execute arbitrary web scripts or HTML. Affected software is XunRuiCMS; no vendo...

CVE-2024-24389

A cross-site scripting XSS vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter...

CVE-2024-24389

A cross-site scripting XSS vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter...