CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

CVE-2024-55452

CVE-2024-55452 affects UJCMS 9.6.3. The issue is a URL redirection vulnerability caused by improper validation of URLs in the upload and rendering of new block/carousel items. An authenticated attacker can lure an unprivileged user to click a malicious block item, redirecting them to an attacker‑...