CVE-2024-10928
CVSS 2.0 Score 4 of 10 (medium)
Details
Published Nov 6, 2024
Updated: Nov 8, 2024
CWE ID 79
CWE ID 74
Summary
CVE-2024-10928 is a newly disclosed vulnerability affecting MonoCMS versions up to 20240528. This issue lies within the Posts Page component and specifically the /monofiles/opensaved.php file. The manipulation of the filtcategory/filtstatus argument triggers cross-site scripting (XSS), which can be exploited remotely. The vulnerability has been made public, increasing the risk of attacks. Despite early disclosure to the vendor, they have not responded or provided a patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.