Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-22569 EUVD-2024-20104GHSA-3w6w-r9vq-3r79

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /inde…

Published Jan 31, 2024 · Updated May 30, 2025 · Assigned by mitre

Description

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index.php?c=install&m=index&step=2&is_install_db=0.

References