CVE-2024-12348: Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting
A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files[] leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12348?
CVE-2024-12348 has been classified as a problematic vulnerability that affects the functionality of the Attachment Upload Handler in jpress 5.1.2.
How do I fix CVE-2024-12348?
To fix CVE-2024-12348, it is recommended to update to the latest version of Guizhou Xiaoma Technology jpress that addresses this vulnerability.
Which component is affected by CVE-2024-12348?
CVE-2024-12348 affects the Attachment Upload Handler component, specifically the AttachmentUtils.isUnSafe function.
What software is impacted by CVE-2024-12348?
CVE-2024-12348 impacts Guizhou Xiaoma Technology jpress version 5.1.2.
Is there a known exploit for CVE-2024-12348?
As of now, there are no public details about known exploits specifically targeting CVE-2024-12348.