1. Home
  2. CVE Database
  3. CVE-2024-25873
MEDIUM · 5.4

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a craft...

Vulnerability Description

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
EnhavoEnhavo0.13.1

Related Weaknesses (CWE)

CWE-80

References

FAQ

What is CVE-2024-25873?

CVE-2024-25873 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a craft...

How severe is CVE-2024-25873?

CVE-2024-25873 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-25873?

Check the references section above for vendor advisories and patch information. Affected products include: Enhavo Enhavo.