Medium severity6.1NVD Advisory· Published Feb 22, 2024· Updated Jun 17, 2026
CVE-2024-25875
CVE-2024-25875
Description
A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
enhavo/enhavo-appPackagist | <= 0.13.1 | — |
Affected products
3- Enhavo/CMSdescription
Patches
Vulnerability mechanics
References
5- github.com/dd3x3r/enhavo/blob/main/xss-page-content-header-undertitel-v0.13.1.mdnvdExploitWEB
- github.com/advisories/GHSA-c579-hhw5-cr3pghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-25875ghsaADVISORY
- www.enhavo.comghsaWEB
- www.enhavo.comnvdProduct
News mentions
0No linked articles in our index yet.