CVE-2024-22569: Poscms

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index.php?c=install&m=index&step=2&is_install_db=0.

Affected products

• Poscms Poscms: version 4.6.2 only

Published 2024-01-31. Last modified 2026-06-17.