CVE-2024-2001 is a Cross-Site Scripting (XSS) vulnerability affecting Cockpit CMS 2.7.0. This flaw allows an authenticated attacker to upload a malicious PDF containing JavaScript, potentially compromising the system when the file is processed. While the CVSS score is 5.4, indicating a medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower immediate threat level despite the "In The Wild" tag. An attacker could exploit this by injecting malicious scripts into the CMS, leading to session hijacking, defacement, or unauthorized data access. Although the SVRS is relatively low, organizations using Cockpit CMS 2.7.0 should patch this vulnerability promptly to mitigate the potential for exploitation, especially considering the presence of malicious payloads already circulating. This vulnerability highlights the importance of input validation and sanitization to prevent XSS attacks. Proper security measures are critical to safeguard against the unauthorized execution of scripts within the CMS environment.