CVE-2024-45933

Name of the Vulnerable Software and Affected Versions OnlineNewsSite version 1.0

Description The issue allows attackers to execute arbitrary code via the Title and summary fields in the "/admin/post/edit/" endpoint. This enables attackers to run any code they want.

Recommendations For OnlineNewsSite version 1.0, as a temporary workaround, consider disabling the editing functionality in the "/admin/post/edit/" endpoint until a patch is available. Restrict access to the Title and summary fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.