VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-24388

CVE-2024-24388

Description

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

Affected products

3
  • Xunruicms/Xunruicms3 versions
    cpe:2.3:a:xunruicms:xunruicms:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:xunruicms:xunruicms:*:*:*:*:*:*:*:*range: <=4.6.2
    • (no CPE)
    • (no CPE)range: <=v4.6.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.