CVE-2024-33338: XSS
Published Apr 29, 2024
·Updated
Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request.
Affected Software
2 affected components
Jizhicms JIZHICMS
Jizhicms JIZHICMS=2.5.4
Event History
Apr 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-33338?
CVE-2024-33338 is classified as a moderate severity Cross Site Scripting vulnerability.
2
How can I fix CVE-2024-33338?
To fix CVE-2024-33338, ensure that user inputs are properly sanitized and validated in jizhicms v.2.5.4.
3
What software is affected by CVE-2024-33338?
CVE-2024-33338 affects jizhicms version 2.5.4.
4
What type of attack does CVE-2024-33338 involve?
CVE-2024-33338 involves a Cross Site Scripting attack that allows attackers to obtain sensitive information.
5
Can CVE-2024-33338 lead to data breaches?
Yes, CVE-2024-33338 can potentially lead to data breaches due to exposure of sensitive information.