CVE-2024-11348

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...

CVE-2024-11348 Reflected XSS in Eura7 CMSmanager

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...

CVE-2024-11348

CVE-2024-11348 affects Eura7 CMSmanager (v4.6 and earlier). The flaw is a Reflected XSS via manipulation of a return GET parameter to a specific endpoint. Fixed by patch dated 17012022 addressing all affected versions. CVSS v4.0: Base 5.3 (Network, Low attack complexity, No privileges, Passive us...