CVE-2024-11175: Public CMS Voting Management save cross site scripting
First published: Wed Nov 13 2024(Updated: )
A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named b9530b9cc1f5cfdad4b637874f59029a6283a65c. It is recommended to apply a patch to fix this issue.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| sanluan PublicCMS | =5.202406.d |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-11175?
CVE-2024-11175 is classified as a problematic vulnerability affecting Public CMS version 5.202406.d.
How does CVE-2024-11175 impact the Voting Management component?
CVE-2024-11175 allows for cross-site scripting through the manipulation of the /admin/cmsVote/save file in the Voting Management component.
Can CVE-2024-11175 be exploited remotely?
Yes, CVE-2024-11175 can be exploited remotely, making it a significant security concern.
What are the consequences of CVE-2024-11175 exploitation?
Exploitation of CVE-2024-11175 may allow attackers to execute arbitrary scripts in the context of a user's session.
How can I mitigate the risk posed by CVE-2024-11175?
To mitigate CVE-2024-11175, it is recommended to update Public CMS to the latest version where the vulnerability is patched.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/publiccms
- canonical/sanluan publiccms
- version/sanluan publiccms/5.202406.d