github.com
https://github.com/LyLme/lylme_spage/issues/91 CVE-2024-36674
MEDIUM
Record summary
CVE-2024-36674 has a selected CVSS score of 6.1 (medium).
Description
LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 24, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
lylme_spageBrowse lylme / lylme_spageDefault status: unknown | CVE List | 1.9.5 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-36674