CVE-2024-11348: EURA7 Cmsmanager

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use.

Affected products

• EURA7 Cmsmanager: up to and including 4.6

Published 2025-01-27. Last modified 2026-06-17.