CVE-2024-31634: XSS
Published Apr 16, 2024
·Updated
Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library.
Affected Software
2 affected components
Xunruicms Xunruicms<4.6.3
Xunruicms Xunruicms<=4.6.3
Event History
Apr 16, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-31634?
CVE-2024-31634 is classified as a high-severity Cross Site Scripting (XSS) vulnerability.
2
How can I fix CVE-2024-31634?
To fix CVE-2024-31634, upgrade Xunruicms to version 4.6.4 or later.
3
Which versions of Xunruicms are affected by CVE-2024-31634?
Xunruicms versions 4.6.3 and earlier are affected by CVE-2024-31634.
4
What type of vulnerability is CVE-2024-31634?
CVE-2024-31634 is a Cross Site Scripting (XSS) vulnerability.
5
Could CVE-2024-31634 allow for remote attacks?
Yes, CVE-2024-31634 allows remote attackers to execute arbitrary code.