CVE-2024-42749: Altocms Alto CMS

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allows a local attacker to execute arbitrary code via a crafted script.

Affected products

• Altocms Alto CMS: version 1.1.13 only

Published 2025-11-14. Last modified 2026-06-17.