Security Advisory

CVE-2024-11348

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-27 13:16:02

Last updated 2025-01-27 19:36:28

Assigner CERT-PL

State PUBLISHED

Description

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

← Browse all CVEs View on cve.org ↗