-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
CVE Vulnerability Details :
CVE-2024-45967
PUBLISHED
More Info
Official Page
Assigner
-
mitre
Assigner Org ID
-
8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At
-
01 Oct, 2024 | 00:00
Updated At
-
01 Oct, 2024 | 14:44
Rejected At
-
▼
CVE Numbering Authority (CNA)
Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.
Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
n/a
Problem Types
Type
CWE ID
Description
text
N/A
n/a
Type:
text
CWE ID:
N/A
Description:
n/a
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
N/A
Hyperlink:
https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
Resource:
N/A
▼
Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Vendor
pagekit
Product
pagekit
CPEs
cpe:2.3:a:pagekit:pagekit:1.0.18:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
1.0.18
Problem Types
Type
CWE ID
Description
CWE
CWE-79
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Type:
CWE
CWE ID:
CWE-79
Description:
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Metrics
Version
Base score
Base severity
Vector
3.1
4.7
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Version:
3.1
Base score:
4.7
Base severity:
MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
Details not found