CVE-2024-32392

MEDIUM Year: 2024
CVSS v3 Score
4.5
Medium
Weakness Type
CWE-79
View all →

Vulnerability Description

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.

Related Vulnerabilities

CVE-2023-1316

MEDIUM
CVSS:4.5(Medium)

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CWE-792023