CVE-2024-44676

MEDIUM 4.8CVE-2024-44676 · Published 10/09/2024 · updated 17/06/2026

In short

CVE-2024-44676 is a MEDIUM (CVSS 4.8) vulnerability affecting eladmin (eladmin).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eladmin eladmin	`≤ 2.7`	No fix yet

Description

eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.

References

elunez/eladmin · Vendor Advisory
jcxj/jcxj · Exploit
l1uyi/cve-list

More vulnerabilities in eladmin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

eladmin

≤ 2.7

No fix yet

More vulnerabilities in eladmin

See all →