MEDIUM
Gila CMS HTTP POST Request page cross site scripting
Published Aug 11, 2024
5.3
MEDIUMCVSS 4.0
EPSS 0.59%
Description
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
- Version 1.10.9StatusaffectedConstraints-
- Version
-
- Version 1.10.9StatusaffectedConstraints-
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://vuldb.com/?ctiid.274114 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.274114 vdb-entrytechnical-descriptionPermissions RequiredThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.384630 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://vuldb.com/?ctiid.274114 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.274114 | vdb-entrytechnical-descriptionPermissions RequiredThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.384630 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Aug 11, 2024
Updated Aug 12, 2024
Reserved Aug 10, 2024
Link CVE-2024-7657
CISA Vulnrichment
Updated Aug 12, 2024