CVE-2024-30419: XSS
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with a contributor or higher privilege who can log in to the product may execute an arbitrary script on the web browser of the user who accessed the website using the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30419?
CVE-2024-30419 has been rated as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2024-30419?
To fix CVE-2024-30419, upgrade your a-blog cms to version 3.1.12 or later for the 3.1.x series, 3.0.32 or later for the 3.0.x series, and corresponding updates for earlier versions.
What versions of a-blog cms are affected by CVE-2024-30419?
CVE-2024-30419 affects a-blog cms versions prior to 3.1.12, 3.0.32, 2.11.61, 2.10.53, and all versions prior to 2.9.
What type of vulnerability is CVE-2024-30419?
CVE-2024-30419 is classified as a cross-site scripting (XSS) vulnerability.
Can exploiting CVE-2024-30419 compromise user data?
Yes, exploiting CVE-2024-30419 could allow attackers to execute scripts in the context of the user's browser, potentially compromising user data.