CVE-2024-11492

Summary

CVE-2024-11492 is a newly disclosed vulnerability affecting 115cms up to version 20240807. This issue lies in the /index.php/admin/web/appurladd.html file, and the manipulation of the tid argument triggers Cross-Site Scripting (XSS). The vulnerability allows remote attackers to initiate the exploit, making it a significant security concern. Despite early notification to the vendor, no response or patch has been reported yet, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.