Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-24388 EUVD-2024-21810GHSA-382c-wf23-2vph

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information v…

Published Feb 2, 2024 · Updated Jun 5, 2025 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

References