CVE-2024-39203

MEDIUM

Z-BlogPHP < 1.7.3.3230 - Cross-Site Scripting in Backend Theme Management

Title source: llm

Description

A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://github.com/5r1an/CVE-2024-39203/issues/1

Scores

CVSS v3 6.1

EPSS 0.0068

EPSS Percentile 47.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (1)

zblogcn/z-blogphp < 1.7.3.3230

Published Jul 08, 2024

Tracked Since Feb 18, 2026