Lucene search
China National Vulnerability DatabaseCNVD-2023-86330HistoryNov 03, 2023 - 12:00 a.m.
Jspxcms Cross-Site Scripting Vulnerability
2023-11-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
jspxcms
cross-site scripting
vulnerability
web content management
user-supplied data
filtering
escaping
exploit
Jspxcms is a scalable enterprise-class open source web content management system (CMS). Jspxcms v10.2.0 version of a cross-site scripting vulnerability , the vulnerability stems from the application of the user-supplied data lack of effective filtering and escaping , an attacker can exploit the vulnerability by injecting a well-designed payload to execute arbitrary Web script or HTML.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jspxcms jspxcms v | eq | 10.2.0 |
Related
cvelist
cvelist
CVE-2023-46911
2023-11-01 00:00:00
nvd
nvd
CVE-2023-46911
2023-11-01 17:15:11
cve
cve
CVE-2023-46911
2023-11-01 17:15:11
prion
prion
Cross site scripting
2023-11-01 17:15:00