← Back to browse · API

CVE-2024-31666

Severity

CRITICAL

CVSS

9.8

EPSS

0.01711

Risk score

39.8

CISA KEV

No

PoC

No

Published

2024-04-22

Modified

2025-03-26

First seen

2026-08-07

Aliases

EUVD-2024-29539, GHSA-RGQ3-JJX4-846V

Products

n/a:n/a, n/a:n/a n/a

Sources

euvd EUVD-2024-29539

Description

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.

References