CVE-2024-1529

CVSS 3.1 Score 7.4 of 10 (high)

Details

Published Mar 12, 2024
CWE ID 79

Summary

CVE-2024-1529 is a vulnerability in CMS Made Simple 2.2.14 that allows for a Cross-Site Scripting (XSS) attack through the /admin/adduser.php page. This vulnerability occurs due to insufficient encoding of user-controlled input in multiple parameters. An authenticated user can be targeted by a remote attacker who sends a specially crafted JavaScript payload, potentially leading to partial control over the victim's browser session. The base severity of this vulnerability is rated as HIGH, with a base score of 7.4 according to CVSS version 3.1. To mitigate this vulnerability, users should update their CMS Made Simple installation to the latest version available.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1529 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options