CVE-2024-1018

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-1018
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1018.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-1018
Published
2024-01-29T20:00:08.200Z
Modified
2026-08-12T03:51:39.378267731Z
Severity
  • 2.4 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
PbootCMS cross site scripting
Details

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252288.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1018.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.2.5-20230421"
                },
                {
                    "last_affected": "3.2.5-20230421"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/pbootcmspro/pbootcms

Affected ranges

Type
GIT
Repo
https://github.com/pbootcmspro/pbootcms
Events
Introduced
e126559ee341d4581ab458d1aad514048d3c5dbf
Last affected
e126559ee341d4581ab458d1aad514048d3c5dbf
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:pbootcms:pbootcms:3.2.5:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.2.5"
        },
        {
            "last_affected": "3.2.5"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*
3.2.5
V3.*
V3.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1018.json"