CVE-2024-31609

HIGH

BOSSCMS 3.10 - Stored Cross-Site Scripting via Header and Footer Code Fields

Title source: llm
STIX 2.1

Description

Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0037
EPSS Percentile 28.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
bosscms/bosscms 3.10.0
Published Apr 25, 2024
Tracked Since Feb 18, 2026