CVE-2024-47313: Catchthemes Catch Base

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Catch Base catch-base allows Stored XSS.This issue affects Catch Base: from n/a through <= 3.4.6.

Affected products

• Catchthemes Catch Base: before 3.4.7 (fixed in 3.4.7); before 4.4.6 (fixed in 4.4.6)

Published 2024-10-06. Last modified 2026-06-17.