CVE-2024-27757 | flusity CMS up to 2.45 tools/addons_model.php Gallery Name cross site scripting (GHSA-5843-5m74-7fqh)

A vulnerability classified as problematic has been found in flusity CMS up to 2.45. This affects an unknown part of the file tools/addons_model.php. The manipulation of the argument Gallery Name leads to cross site scripting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2024-27757. It is possible to initiate the attack remotely. There is no exploit available.