CVE-2024-11348 — Reflected XSS in Eura7 CMSmanager

CVE-2024-11348

Reflected XSS in Eura7 CMSmanager PUBLISHED

Description (CNA)

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Affected (CNA)

Vendor / product	Versions
Eura7 / CMSmanager	affected 0 through 4.6

CWE

CWE-79

References

https://cert.pl/en/posts/2025/01/CVE-2024-11348

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.