A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
No PoCs from references.
- https://github.com/bigzooooz/CVE-2024-55060
- https://github.com/plzheheplztrying/cve_monitor