CVE-2024-12180

Summary

CVE-2024-12180 is a recently disclosed vulnerability affecting DedeCMS 5.7.116. The issue lies within an unidentified function in the /member/article_add.php file. An attacker can exploit this weakness by manipulating the argument body, resulting in cross-site scripting (XSS). This vulnerability enables remote attacks, increasing the severity of potential threats. Public disclosure of the exploit heightens the risk, making it crucial for users to apply the necessary patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.