PT-2024-25262

CVE-2024-33442

Published

2024-05-01

Updated

2025-03-25

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33

Description An issue in the software allows a remote attacker to execute arbitrary code via the "add post.php" component.

Recommendations For flusity-CMS version 2.33, consider disabling access to the "add post.php" component until a patch is available.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾