CVE-2024-55341: XSS
Published Dec 20, 2024
·Updated
A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.
Affected Software
2 affected components
nuget/Piranha<=11.1.0
Dotnetfoundation Piranha Cms=11.1
Event History
Dec 20, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
Affected Software
Advisory Published
via GitHub·09:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-55341?
CVE-2024-55341 is classified as a high severity stored cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2024-55341?
To fix CVE-2024-55341, upgrade Piranha CMS to version 11.2 or higher.
3
What type of attack does CVE-2024-55341 enable?
CVE-2024-55341 enables remote attackers to execute arbitrary JavaScript in the user's web browser.
4
What are the affected versions of Piranha CMS for CVE-2024-55341?
CVE-2024-55341 affects Piranha CMS version 11.1.0 and below.
5
Where can I find more information about CVE-2024-55341?
For more information on CVE-2024-55341, consult the official GitHub repository for Piranha CMS.