CVE-2024-11070

LOW

Publiccms - Code Injection

Title source: rule

Description

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS 5.202406.d. This issue affects some unknown processing of the file /admin/cmsTagType/save of the component Tag Type Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

gitee 2,673 stars
by sanluan · javawriteup
https://gitee.com/sanluan/PublicCMS/issues/IB1Q5J

References (3)

Scores

CVSS v3 3.5
EPSS 0.0013
EPSS Percentile 31.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-94 CWE-79
Status published
Products (1)
publiccms/publiccms 5.202406.d
Published Nov 11, 2024
Tracked Since Feb 18, 2026