medium5.4
CVE-2024-2245
Cross-Site Scripting vulnerability in moziloCMS version 2.0.
Impact
Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilo | Mozilocms | Version 2.0 |