Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-2245

Cross-Site Scripting vulnerability in moziloCMS

Description

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moziloCMS moziloCMS

Default version status: unaffected

  • 2.0affected

References