CVE-2024-40552

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/ScriptComponent.java.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2024-07-12

Last modified

2025-03-26

Weaknesses

CWE-94

Affected products

• Publiccms (Publiccms)

References

• https://gitee.com/sanluan/PublicCMS/issues/IAAMMU