CVE-2024-2001
CVE-2024-2001 · Cross-Site Scripting vulnerability in Cockpit CMS
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
CVSS 5.5 · Medium · EPSS 0.3%
- Published
- Updated
Stack: php
Affected products and versions
cockpit cms
- Versions
- 2.7.0: Affected
No fix published
cockpit-hq/cockpit Packagist
- Versions
- 2.7.0
No fix published