CVE-2024-1018 – PbootCMS cross site scripting

https://notcve.org/view.php?id=CVE-2024-1018

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/index#tab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. • https://github.com/1MurasaKi/PboostCMS_XSS/blob/main/README.md https://vuldb.com/?ctiid.252288 https://vuldb.com/?id.252288 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •