An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/taosir/wtcms/issues/16 |
![]() ![]() |
History
Tue, 29 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Wtcms Project
Wtcms Project wtcms |
|
Weaknesses | CWE-79 | |
CPEs | cpe:2.3:a:wtcms_project:wtcms:1.0:*:*:*:*:*:*:* | |
Vendors & Products |
Wtcms Project
Wtcms Project wtcms |
|
Metrics |
cvssV3_1
|
Fri, 25 Oct 2024 21:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS). | |
References |
|

Status: PUBLISHED
Assigner: mitre
Published: 2024-10-25T00:00:00
Updated: 2024-10-29T18:52:24.343Z
Reserved: 2024-10-08T00:00:00
Link: CVE-2024-48239

Updated: 2024-10-29T18:52:16.559Z

Status : Awaiting Analysis
Published: 2024-10-25T22:15:02.770
Modified: 2024-10-29T19:35:22.840
Link: CVE-2024-48239

No data.