CVE-2024-30884

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz!

High · published April 11, 2024

CVSS v3.1
7.1
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Published
2024-04-11T00:00Z
EPSS history
Timeline
  • 11 APR 00:00Z
    Reflected Cross-Site Scripting (XSS) vulnerability in Discuz!
    cvelistv5