CVE-2024-38454

2024-06-1615:15:51

Google

osv.dev

expressionengine

version 7.4.11

xss

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

ExpressionEngine before 7.4.11 allows XSS.

CPENameOperatorVersion
expressionengineeq7.3.0-dp.71
expressionengineeq7.2.7-dp.1
expressionengineeq7.3.11-dp.2
expressionengineeq6.3.0-dp.38
expressionengineeq7.3.8-dp.1
expressionengineeq7.2.0-dp.12
expressionengineeq7.3.11
expressionengineeq6.3.0-dp.37
expressionengineeq7.0.0-rc.3-dp.7
expressionengineeq6.0.2

Name	Operator	Version
expressionengine	eq	7.3.0-dp.71
expressionengine	eq	7.2.7-dp.1
expressionengine	eq	7.3.11-dp.2
expressionengine	eq	6.3.0-dp.38
expressionengine	eq	7.3.8-dp.1
expressionengine	eq	7.2.0-dp.12
expressionengine	eq	7.3.11
expressionengine	eq	6.3.0-dp.37
expressionengine	eq	7.0.0-rc.3-dp.7
expressionengine	eq	6.0.2