XSS in Eura7 Cmsmanager
CVE-2024-11348
Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.
Affected products
- Eura7 Cmsmanager — versions 0