Executive brief
Pagekit Cross-site Scripting vulnerability
Affected products
- Packagist pagekit/pagekit
Junglewise Threat Intelligence
CVE-2024-45967: Pagekit Cross-site Scripting vulnerability
CVE-2024-45967 · Severity: low · CVSS 3.1 · Published 2024-10-01
Vendors: Packagist.
Related threats
- Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
- Pagekit CMS is vulnerable to OS Command Injection via Storage component
- Command injection in pagekit
- Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
- Pagekit CMS cross-site scripting in Markdown text box where articles are edited