Lucene search

K
cveMitreCVE-2023-30123
HistoryApr 28, 2023 - 2:15 p.m.

CVE-2023-30123

2023-04-2814:15:11
CWE-79
mitre
web.nvd.nist.gov
18
wuzhicms
v4.1.0
xss
vulnerability
member center
account settings
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.5%

wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings.

Affected configurations

Nvd
Node
wuzhicmswuzhicmsMatch4.1.0
VendorProductVersionCPE
wuzhicmswuzhicms4.1.0cpe:2.3:a:wuzhicms:wuzhicms:4.1.0:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.5%

Related for CVE-2023-30123