CVE-2024-55342: A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain…

PriorityP423medium4.7CVSS 3.1

AVNACLPRNUIRSCCLINAN

EPSS

0.48%

38.1th percentile

A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dotnetfoundation	piranha_cms	—	—
piranhacms	piranha	0 – 11.1.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.