Medium severity6.1NVD Advisory· Published Jun 20, 2024· Updated Jun 17, 2026

CVE-2024-6179

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.

Affected products

LG/Supersign CMS
cpe:2.3:a:lg:supersign_cms:*:*:*:*:*:*:*:*
Range: >=4.1.3,<4.3.1
LG Electronics/Supersign CMSv52 versions
4.1.3+ 1 more
- (no CPE)range: 4.1.3
- (no CPE)range: from 4.1.3 before < 4.3.1

Patches

Vulnerability mechanics

References

lgsecurity.lge.com/bulletins/idproductsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000