CVE-2024-55341
Published
CVSS v3
4.7
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.
Piranha CMS is the friendly editor-focused CMS for .NET that can be used both as an integrated CMS or as a headless API.
GitHub