CVE-2024-8866

Summary

CVE-2024-8866 is a cross-site scripting vulnerability identified in AutoCMS version 5.4, specifically affecting the file /admin/robot.php. The vulnerability allows remote attackers to manipulate the "sidebar" argument, posing a medium-level threat with a CVSS base score of 4.3 and an exploitability score of 2.8. Remediation involves securing input handling in the affected file to prevent unauthorized script execution. As the exploit has been publicly disclosed, organizations using this version of AutoCMS are at risk if they do not promptly address this vulnerability. It is important to note that no user authentication is required for exploitation, increasing the urgency for remediation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.