PT-2025-40282 · Unknown · Neto E-Commerce Cms

Published 2025-10-01 · Updated 2025-10-02 · CVE-2024-57494

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Neto E-Commerce CMS versions 6.313.0 through 6.3115

Description A Cross Site Scripting issue exists in Neto E-Commerce CMS. This allows a remote attacker to potentially escalate privileges. The issue is related to the kw parameter.

Recommendations Update Neto E-Commerce CMS to a version later than 6.3115.

Exploit

Fix

LPE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-57494

Affected Products

Neto E-Commerce Cms

References · 5

• 🔥 https://github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2024-57494.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57494 · Security Note
• https://twitter.com/VulmonFeeds/status/1973586255691624939 · Twitter Post
• https://t.me/CVEtracker/33859 · Telegram Post
• https://twitter.com/CVEnew/status/1973459916812664916 · Twitter Post