Low severity2.4NVD Advisory· Published Aug 17, 2024· Updated Jun 17, 2026
CVE-2024-7900
CVE-2024-7900
Description
A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact address/copyright/technical support leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
31.3.3.2+ 1 more
- (no CPE)range: 1.3.3.2
- (no CPE)range: = 1.3.3.2
Patches
Vulnerability mechanics
References
5- github.com/DeepMountains/Mirage/blob/main/CVE16-1.mdnvdExploitThird Party Advisory
- github.com/DeepMountains/Mirage/blob/main/CVE16-2.mdnvdExploitThird Party Advisory
- vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.