Lucene search

MitreVULNRICHMENT:CVE-2024-24388

HistoryFeb 02, 2024 - 12:00 a.m.

CVE-2024-24388

2024-02-0200:00:00

mitre

github.com

cross-site scripting

xunruicms

remote attackers

sensitive information

AI Score

5.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

References

www.cnblogs.com/rxtycc/p/17948379