CVE-2024-7512
CVSS V2 None
CVSS V3 None
Description
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue administrator could inject malicious code. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 1.8 with vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA: N. Versions below 9 are not affected. Thanks, m3dium for reporting.
Overview
- CVE ID
- CVE-2024-7512
- Assigner
- ConcreteCMS
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-09T00:19:14.082Z
- Last Modified Date
- 2024-08-09T00:19:14.082Z
Weakness Enumerations
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-7512 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7512 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-08-09 13:08:31 | Added to TrackCVE |