← All advisories

Medium severity6.1NVD Advisory· Published Jun 26, 2024· Updated Jun 17, 2026

CVE-2024-39241

CVE-2024-39241

Description

Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview.

Affected products

3

skycaiji/skycaiji3 versions
cpe:2.3:a:skycaiji:skycaiji:2.8:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:skycaiji:skycaiji:2.8:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=2.8

Patches

Vulnerability mechanics

References

1

fushuling.com/index.php/2024/06/19/test3/nvdBroken Link

News mentions

0

No linked articles in our index yet.