PT-2024-21944

CVE-2024-27558

·

Published

2024-03-01

·

Updated

2025-03-28

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Stupid Simple CMS version 1.2.4
Description The issue allows for Cross Site Scripting (XSS) within the blog title of the settings.
Recommendations For Stupid Simple CMS version 1.2.4, update to a version that fixes the Cross Site Scripting issue within the blog title of the settings. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2024-27558
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com