CVE-2024-7162: SeaCMS cross site scripting
First published: Sun Jul 28 2024(Updated: )
A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272576.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tina Tinacms | =12.9 | |
| Tina Tinacms | =13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7162?
CVE-2024-7162 is classified as problematic due to its potential for cross-site scripting.
How do I fix CVE-2024-7162?
To mitigate CVE-2024-7162, ensure that input sanitization is implemented in the affected file js/player/dmplayer/admin/post.php.
Which versions of SeaCMS are affected by CVE-2024-7162?
CVE-2024-7162 affects SeaCMS versions 12.9 and 13.0.
What type of vulnerability is CVE-2024-7162?
CVE-2024-7162 is a cross-site scripting vulnerability.
Can CVE-2024-7162 be exploited remotely?
Yes, CVE-2024-7162 can be exploited remotely due to the manipulation of the yzm argument.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/epss
- collector/epss-latest
- source/FIRST
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/seacms
- canonical/tina tinacms
- version/tina tinacms/12.9
- version/tina tinacms/13.0