CVE-2024-27757

概要

参考情報

• jubilianite/flusity-CMS security advisory · Exploit

flusity のその他の脆弱性

• CVE-2024-33442中 4.3An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component.
• CVE-2024-31666緊急 9.8An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.
• CVE-2024-32418緊急 9.8An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.
• CVE-2024-27680中 6.1Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."
• CVE-2024-27668中 6.1Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'