Skip to content
Sign in
7.1 High

CVE-2025-24771 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Content Manager Light content-manager-light allows Reflected XSS.This issue affects Content Manager Light: from n/a through <= 3.2.

Affected products and versions

Product Affected versions Fixed in
Content Manager Light 3.2 earliest → 3.2 No fix stated

Other CVEs of Content Manager Light

The 2 CVEs of Content Manager Light →
CVE-2025-31770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes… 6.5 Medium
Track this CVE