CVE-2024-12666 | ClassCMS up to 4.8 User Management Page admin?do=admin:user:editPost insufficient privileges

A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges.

This vulnerability is known as CVE-2024-12666. The attack can be launched remotely. Furthermore, there is an exploit available.