CVE-2024-10478

LOW

pb-cms < 2.0.1 - Cross-Site Scripting in Edit Article Handler

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /admin#article/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.282089
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.282089
Exploit, Issue Tracking exploit issue-tracking
https://gitee.com/LinZhaoguan/pb-cms/issues/IAYIAO

Scores

CVSS v3 2.4
EPSS 0.0016
EPSS Percentile 37.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
pb-cms_project/pb-cms < 2.0.1
Published Oct 29, 2024
Tracked Since Feb 18, 2026