Medium severity6.1NVD Advisory· Published Feb 22, 2024· Updated Jun 17, 2026
CVE-2024-25876
CVE-2024-25876
Description
A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
enhavo/enhavo-appPackagist | <= 0.13.1 | — |
Affected products
3- Enhavo/CMSdescription
Patches
Vulnerability mechanics
References
5- github.com/dd3x3r/enhavo/blob/main/xss-page-content-header-titel-v0.13.1.mdnvdExploitWEB
- github.com/advisories/GHSA-pcm8-qqrp-w6qfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-25876ghsaADVISORY
- www.enhavo.comghsaWEB
- www.enhavo.comnvdProduct
News mentions
0No linked articles in our index yet.