CVE-2024-24388

6.1 mediumEPSS 0.5%

Medium (6.1) in xunruicms xunruicms. EPSS 0.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xunruicms:xunruicms

References

https://www.cnblogs.com/rxtycc/p/17948379
https://www.cnblogs.com/rxtycc/p/17948379

Check your stack JSON