PT-2023-19733 · Unknown · Bludit Cms
CVE-2023-24675
·
Publicado
2023-09-01
·
Atualizado
2023-09-01
CVSS v3.1
4.8
Média
| Vetor | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
BluditCMS version 3.14.1
Description
The issue allows attackers to execute arbitrary code via the Categories Friendly URL, specifically through a Cross Site Scripting vulnerability. This enables attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control.
Recommendations
For BluditCMS version 3.14.1, update to a version that fixes this issue, as using the Categories Friendly URL feature in this version poses a significant risk. As a temporary workaround, consider disabling the Categories Friendly URL feature until a patch is available.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bludit Cms