CVE-2024-41350

2024-08-2900:00:00

mitre

github.com

bjyadmin

commit

a560fd5

vulnerable

cross site scripting

public

statics

umeditor1_2_3

php

imageup.php

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:baijunyao:thinkphp-bjyadmin:*:*:*:*:*:*:*:*"
    ],
    "vendor": "baijunyao",
    "product": "thinkphp-bjyadmin",
    "versions": [
      {
        "status": "affected",
        "version": "commit_a560fd5"
      }
    ],
    "defaultStatus": "unknown"
  }
]