Unrated severityNVD Advisory· Published Oct 25, 2024· Updated Oct 29, 2024

CVE-2024-48239

Description

An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WTCMS/WTCMSdescription
Wtcms Project/Wtcmsllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/taosir/wtcms/issues/16mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000