CVE-2024-30884

Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.
CVSS

No CVSS.

References
Link Resource
https://github.com/Hebing123/cve/issues/28 Exploit Issue Tracking
https://github.com/Hebing123/cve/issues/28 Exploit Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:discuz:discuzx:3.4:*:*:*:*:*:*:*

History

17 Jun 2025, 20:54

Type Values Removed Values Added
First Time Discuz discuzx
Discuz
CPE cpe:2.3:a:discuz:discuzx:3.4:*:*:*:*:*:*:*
References () https://github.com/Hebing123/cve/issues/28 - () https://github.com/Hebing123/cve/issues/28 - Exploit, Issue Tracking

11 Apr 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-11 05:15

Updated : 2025-06-17 20:54


NVD link : CVE-2024-30884

Mitre link : CVE-2024-30884


JSON object : View

Products Affected

discuz

  • discuzx
CWE

No CWE.