Piranha CMS Cross-site Scripting vulnerability
Moderate severity
GitHub Reviewed
Published
to the GitHub Advisory Database
•
Updated
Description
A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.
References
Published by the National Vulnerability Database
Published to the GitHub Advisory Database
Reviewed
Last updated
Severity
Moderate
/ 10
CVSS v3 base metrics
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS score
(35th percentile)
Weaknesses
CVE ID
CVE-2024-55341
GHSA ID
GHSA-mmx8-vrfg-hfmq
Source code
See something to contribute?
Suggest improvements for this vulnerability.