Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-72248
HistorySep 11, 2023 - 12:00 a.m.

KodExplorer cross-site scripting vulnerability (CNVD-2023-72248)

2023-09-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
kodexplorer
web file manager
cross-site scripting

0.001 Low

EPSS

Percentile

25.4%

KodExplorer is a web file manager. A cross-site scripting vulnerability exists in KodExplorer version 4.45. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /index.php, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.

CPENameOperatorVersion
kalcaddle kodexplorereq4.45

0.001 Low

EPSS

Percentile

25.4%

Related for CNVD-2023-72248