Description
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS).
Medium · 4.8
CVE-2024-48239
EUVD-2024-42966GHSA-65xp-45wv-pvw6
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting …
Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre