VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 3, 2025· Updated Jun 17, 2026

CVE-2024-57099

CVE-2024-57099

Description

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ClassCMS/ClassCMS3 versions
    cpe:2.3:a:classcms:classcms:4.8:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:classcms:classcms:4.8:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: =4.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.