CVE-2024-6082

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6082

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6082.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6082

Published

2024-06-17T23:00:06Z

Modified

2026-08-27T03:57:02Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

PHPVibe Global Options Page functionalities.global.php cross site scripting

Details

A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268823. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-79"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6082.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "11.0.46"
                },
                {
                    "last_affected":  "11.0.46"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/PHPVibe/PHPVibe-Video-Sharing-CMS

Affected ranges

Type

GIT

Repo

https://github.com/PHPVibe/PHPVibe-Video-Sharing-CMS

Events

Introduced

b3d38f4849305f39085852cf207f58c27eef225b

Last Affected

b3d38f4849305f39085852cf207f58c27eef225b

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:phpvibe:phpvibe:11.0.46:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "11.0.46"
        },
        {
            "last_affected":  "11.0.46"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

11.*

11.0.46

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6082.json"