CVE-2024-25297

MEDIUM 4.8EPSS 0.6%

Cross Site Scripting (XSS) vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php.

CVSS v3.1: 4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1: 4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.57% chance of exploitation in the next 30 days, 45th percentile
Published: 2024-02-17
Updated: 2024-08-01

Proof-of-concept exploits (1)

CpyRe/I-Find-CVE-2024/blob/main/BLUDIT%20Stored%20XSS.md

References

Related