CVE-2024-23183: XSS
Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute an arbitrary script on the logged-in user's web browser.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
a-blog cmsto a version that resolves this vulnerability.Fixed in 3.1.7 - Upgrade
Upgrade
a-blog cmsto a version that resolves this vulnerability.Fixed in 3.0.29 - Upgrade
Upgrade
a-blog cmsto a version that resolves this vulnerability.Fixed in 2.11.58 - Upgrade
Upgrade
a-blog cmsto a version that resolves this vulnerability.Fixed in 2.10.50 - Upgrade
Upgrade
a-blog cmsto a version that resolves this vulnerability.Fixed in 2.9.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23183?
CVE-2024-23183 is classified as a high severity cross-site scripting vulnerability.
How do I fix CVE-2024-23183?
To fix CVE-2024-23183, update A-blog CMS to version 3.1.7 or later for 3.1.x series, version 3.0.29 or later for 3.0.x series, version 2.11.58 or later for 2.11.x series, version 2.10.50 or later for 2.10.x series, or upgrade from versions 2.9.0 and earlier.
What versions of A-blog CMS are affected by CVE-2024-23183?
CVE-2024-23183 affects A-blog CMS versions prior to 3.1.7, 3.0.29, 2.11.58, 2.10.50, and 2.9.0.
Who is at risk from CVE-2024-23183?
Remote authenticated attackers can exploit CVE-2024-23183 to perform cross-site scripting attacks against users of vulnerable A-blog CMS versions.
Is there a workaround for CVE-2024-23183 before updating?
There are no specific workarounds for CVE-2024-23183; updating to a patched version is the recommended course of action.