CVE-2024-12503 | ClassCMS 4.8 Model Management Page /index.php/admin URL cross site scripting

A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting.

This vulnerability is known as CVE-2024-12503. The attack can be launched remotely. Furthermore, there is an exploit available.