CVE-2024-58297

Name of the Vulnerable Software and Affected Versions PyroCMS version 3.0.1

Description The software contains a stored cross-site scripting issue in the admin redirects configuration. Attackers can inject malicious scripts by inserting a payload into the 'Redirect From' field. This allows for the execution of arbitrary JavaScript when administrators view the redirects page.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the 'Redirect From' field to prevent the injection of malicious scripts.