Add CVE-2024-39646 (Updated CVEs)

[Sourabh-Sahu]

Add CVE-2024-39646

Improper Neutralization of Input During Web Page Generation (XSS) in Custom 404 Pro <= 3.11.1.

• Fixed CVE-2020-XXX / Added CVE-2020-XXX / Updated CVE-2020-XXX
• References:

Template validation

• Validated with a host running a vulnerable version and/or configuration (True Positive)
• Validated with a host running a patched version and/or configuration (avoid False Positive)

$ nuclei -u https://192.168.2.180/wordpress -t CVE-2024-39646.yaml -var username=admin -var password=admin -debug

debug.txt

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[DhiyaneshGeek]

Hi @Sourabh-Sahu

As part of the bounty program, we’re closing this report for the following reason: the submitted CVE requires prerequisite data to exploit. Our program scope only covers vulnerabilities that are fully unauthenticated and independently verifiable using JS and HTTP templates.

Thanks for the submission and understanding.