CVE-2024-9282
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-9282 is a newly disclosed vulnerability affecting bg5sbk MiniCMS version 1.11. This issue, classified as problematic, impacts an unspecified function within the page-edit.php file. The vulnerability enables an attacker to carry out cross-site request forgery, which can be exploited remotely. The exploit has been made public, increasing the risk of potential attacks. The initial researcher advisory indicates that the vendor was contacted about this disclosure but failed to respond. Confusing version and file name information add to the complexity of addressing this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MiniCMS