CVE-2024-57599

low-risk

Published 2025-02-06

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php

Do I need to act?

0.11% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.8/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Douphp

Affected Vendors

Douco

References (3)

Exploit https://github.com/Arykon/cve/blob/main/douphp.pdf

Product https://www.douphp.com/

Exploit https://github.com/Arykon/cve/blob/main/douphp.pdf

/ 100

low-risk

Severity 19/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal