CVE-2024-39143

2024-07-0200:00:00

mitre

github.com

cross-site scripting

residencecms

html payload

AI Score

4.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML inside which acts as a stored XSS payload.

References

github.com/Coderberg/ResidenceCMS/issues/128