A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/oroinc/orocommerce-application | Not Applicable |
| https://github.com/ZumiYumi/CVE-2024-50677 | Exploit Third Party Advisory |
Configurations
History
13 Jun 2025, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oroinc:oroplatform:5.1.0:-:*:*:*:*:*:* | |
| References | () https://github.com/ZumiYumi/CVE-2024-50677 - Exploit, Third Party Advisory | |
| References | () https://github.com/oroinc/orocommerce-application - Not Applicable | |
| First Time |
Oroinc oroplatform
Oroinc |
06 Dec 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-06 16:15
Updated : 2025-06-13 00:35
NVD link : CVE-2024-50677
Mitre link : CVE-2024-50677
JSON object : View
Products Affected
oroinc
- oroplatform
CWE
No CWE.