CVE-2024-34452

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

CMSimple_XH 1.7.6 allows XSS by uploading a crafted SVG document.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a
cmsimple-xhcmsimple_xh1.7.6

References

Timeline

Published
Jun 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-344534.3TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=read_data&type=connectivity_test (which reachesCVE-2024-344547.4Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a CVE-2024-344557.5Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2.CVE-2024-344576.5On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view CVE-2024-344587.5Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.CVE-2024-344597.5An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout cCVE-2024-34468.2A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard CVE-2024-344606.5The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. (This component was removed in 9.5.60602.)CVE-2024-344619.8Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling codeCVE-2024-344626.1Alinto SOGo through 5.10.0 allows XSS during attachment preview.CVE-2024-344635.1BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (The packet data also lackCVE-2024-344676.1ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.
CVE-2024-34452: Medium severity, CVSS 6.1 | Vulnix