CVE-2022-24374

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x…

published February 24, 2022

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-23916.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00905 · 59.5th percentile
Published
2022-02-24T09:50Z
EPSS history
Timeline
  • 24 FEB 09:50Z
    Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x…
    cvelistv5