CVE-2024-33338 - Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request

Back Back to CVE browser

HIGH

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request

Published Apr 29, 2024

7.3

HIGH

CVSS 3.1

EPSS 0.97%

Description

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31080
Advisory
https://github.com/7akahash1/POC/blob/main/1.md
ExploitThird Party Advisory
https://github.com/Cherry-toto/jizhicms/issues/86
ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-31862
US Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31080		Advisory
https://github.com/7akahash1/POC/blob/main/1.md		ExploitThird Party Advisory
https://github.com/Cherry-toto/jizhicms/issues/86		ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-31862		US Government Resource