CVE-2024-57097: Classcms

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.

Affected products

• Classcms Classcms: version 4.8 only

Published 2025-02-03. Last modified 2026-06-17.