CVE-2024-11070

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-11070

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11070.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-11070

Published

2024-11-11T14:31:12.326Z

Modified

2026-07-08T08:12:36.026778525Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Sanluan PublicCMS Tag Type save cross site scripting

Details

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS 5.202406.d. This issue affects some unknown processing of the file /admin/cmsTagType/save of the component Tag Type Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11070.json",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "5.202406.d"
                },
                {
                    "last_affected": "5.202406.d"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/sanluan/publiccms

Affected ranges

Type

GIT

Repo

https://github.com/sanluan/publiccms

Events

Introduced

6ae5241102409927e86928390f21be06690e2b40

Last affected

6ae5241102409927e86928390f21be06690e2b40

Database specific

{
    "cpe": "cpe:2.3:a:publiccms:publiccms:5.202406.d:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.202406.d"
        },
        {
            "last_affected": "5.202406.d"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*

5.202406.d

V5.*

V5.202406.f

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11070.json"