CVE-2024-55342: XSS
A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55342?
CVE-2024-55342 has been identified as a critical vulnerability due to its potential to execute malicious JavaScript in user browsers via a crafted PDF upload.
How do I fix CVE-2024-55342?
To mitigate CVE-2024-55342, update Piranha CMS to version 11.2 or later to ensure proper handling of file uploads.
Who is affected by CVE-2024-55342?
CVE-2024-55342 affects all users of Piranha CMS version 11.1 or earlier.
What is the impact of exploiting CVE-2024-55342?
Exploiting CVE-2024-55342 can lead to Cross-Site Scripting (XSS) attacks, compromising user security and potentially leading to data breaches.
Is CVE-2024-55342 a remote attack vector?
Yes, CVE-2024-55342 allows authenticated remote attackers to exploit the vulnerability through crafted PDF uploads.