CVE-2024-11491
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-11491 is a newly disclosed vulnerability affecting 115cms up to version 20240807. This issue has been rated as problematic due to the existence of cross-site scripting (XSS) in the /index.php/admin/web/useradmin.html file's unknown functionality. The vulnerability can be exploited remotely by manipulating the argument 'ks'. This disclosure has been made public, and attackers may already be using it. Regrettably, the vendor has not yet responded to reports of this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.