CVE-2024-11493

Summary

CVE-2024-11493 is a recently disclosed vulnerability affecting versions of 115cms up to and including 20240807. This issue lies within the unknown code of the file /index.php/setpage/admin/pageAE.html, leading to cross-site scripting (XSS). An attacker can exploit this vulnerability remotely by manipulating the argument tid. As of now, the exploit is publicly disclosed, increasing the risk of potential attacks. Unfortunately, the vendor has not responded to notifications regarding this disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.