CVE-2024-11175

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-11175

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11175.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-11175

Published

2024-11-13T15:31:26.613Z

Modified

2026-07-08T07:57:15.706269993Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Public CMS Voting Management save cross site scripting

Details

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named b9530b9cc1f5cfdad4b637874f59029a6283a65c. It is recommended to apply a patch to fix this issue.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.202406.d"
                },
                {
                    "last_affected": "5.202406.d"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11175.json"
}

References

Affected packages

Git / github.com/sanluan/publiccms

Affected ranges

Type

GIT

Repo

https://github.com/sanluan/publiccms

Events

Introduced

6ae5241102409927e86928390f21be06690e2b40

Last affected

6ae5241102409927e86928390f21be06690e2b40

Database specific

{
    "extracted_events": [
        {
            "introduced": "5.202406.d"
        },
        {
            "last_affected": "5.202406.d"
        }
    ],
    "cpe": "cpe:2.3:a:publiccms:publiccms:5.202406.d:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

5.*

5.202406.d

V5.*

V5.202406.f

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11175.json"