CVE-2024-11489

Summary

CVE-2024-11489 is a newly disclosed vulnerability affecting 115cms up to version 20240807. This issue is classified as problematic, as it enables cross-site scripting (XSS) attacks. The vulnerability lies within an unknown function of the file /index.php/admin/web/file.html and can be exploited by manipulating the argument 'ks'. Attacks can be launched remotely, and the exploit has already been made public. Despite early disclosure to the vendor, they have yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.