CVE-2024-48239

n/a / n/a PUBLISHED

Description (CNA)

An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS).

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/taosir/wtcms/issues/16

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.