VulnerabilityAnalyzed

CVE-2024-11587

A vulnerability was found in idcCMS 1.60.

MEDIUM 5.3EPSS 0.91%

Does this matter?

Lower severity and a low EPSS score (0.91%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0: 5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.91% probability · 58th percentile
CISA KEV: Not listed
Weakness: CWE-79, CWE-94
Affected: idccms/idccms
Source: cna@vuldb.com

References

https://github.com/Hebing123/cve/issues/75Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.285657Permissions Required
https://vuldb.com/?id.285657Third Party Advisory
https://vuldb.com/?submit.442071Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.