CVE-2024-44872: Mozilo Mozilocms

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

Affected products

• Mozilo Mozilocms: version 3.0 only

Published 2024-09-10. Last modified 2026-06-17.