CVE-2024-39143

MEDIUM

ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-39143 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.

Description

A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML inside which acts as a stored XSS payload.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 5, 2024 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)ExploitDB exploitby Jeremia Geraldi SihombingNot analyzed1 file
ExploitDB
PoC details

References

2