CVE-2024-11348

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - cvd@cert.pl

Published

2025-01-27

Last modified

2025-01-27

Weaknesses

CWE-79

Affected products

• Cmsmanager (Eura7)

References

• https://cert.pl/en/posts/2025/01/CVE-2024-11348