4.7
CVE-2024-55341
- EPSS 0.44%
- Veröffentlicht 20.12.2024 20:15:23
- Zuletzt bearbeitet 21.04.2025 17:02:56
- Erkennungen
LoginA stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dotnetfoundation ≫ Piranha Cms Version 11.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.358 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 4.7 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
https://github.com/PiranhaCMS/piranha.core
https://sec-fortress.github.io/posts/articles/posts/CVE-2024-55341.html