CVE-2024-45406 MEDIUM

CVE-2024-45406: Craft CMS stored XSS in breadcrumb list and title fields

Vendor Craftcms

Product cms

Weakness CWE-80 · XSS · basic

Published September 9, 2024

Last update September 9, 2024

CVSS base score

5.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Craft is a content management system (CMS). Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input.

Key dates

September 9, 2024 CVE published

September 9, 2024 Record updated

External resources

Related vulnerabilities