medium5.4Public exploit code
CVE-2024-39143
A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)2025-04-09 · webapps · php
Impact
A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML inside which acts as a stored XSS payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coderberg | Residencecms | Version 2.10.1 |