CVE-2024-30884: XSS
Published Apr 11, 2024
·Updated
Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.
Affected Software
2 affected components
Discuz Discuz!
Discuz DiscuzX=3.4
Event History
Apr 11, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30884?
CVE-2024-30884 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2024-30884?
To fix CVE-2024-30884, update your Discuz! software to the latest version that addresses this vulnerability.
3
What software is affected by CVE-2024-30884?
CVE-2024-30884 affects Discuz! version X3.4 20220811.
4
What type of vulnerability is CVE-2024-30884?
CVE-2024-30884 is a reflected Cross-Site Scripting (XSS) vulnerability.
5
What can attackers achieve with CVE-2024-30884?
Attackers can execute arbitrary code and obtain sensitive information through crafted payloads exploiting CVE-2024-30884.