What is CVE-2024-8002?

CVE-2024-8002 is a medium-severity vulnerability in Viwis Lms, classified under Cross-site Scripting. CVSS score: 4.3/10. Published 2025-01-08.

How severe is CVE-2024-8002?

Medium severity. CVSS v3 base score is 4.3 out of 10.

RCE in Viwis Lms

CVE-2024-8002

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component File Upload. The manipulation of the argument filename leads to cross site scriptin…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Viwis Lms — versions 9.11

Weakness classification (CWE)

CWE-79 — Cross-site Scripting
CWE-94 — Code Injection

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)

Frequently asked questions

What is CVE-2024-8002?: CVE-2024-8002 is a medium-severity vulnerability in Viwis Lms, classified under Cross-site Scripting. CVSS score: 4.3/10. Published 2025-01-08.
How severe is CVE-2024-8002?: Medium severity. CVSS v3 base score is 4.3 out of 10.