CVE-2024-55342

Published: 2024-12-20T19:15Z

Last Modified: 2024-12-20T20:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt