CVE-2024-11348 Information

Description

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Reference

https://cert.pl/en/posts/2025/01/CVE-2024-11348