Lucene search
HistoryApr 25, 2023 - 6:15 p.m.
CVE-2023-30177
craftcms
xss
vulnerability
volume name
cve-2023-30177
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.3%
CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.
Affected configurations
Node
craftcmscraft_cmsMatch3.7.59
| CPE | Name | Operator | Version |
|---|---|---|---|
| craftcms:craft_cms | craftcms craft cms | eq | 3.7.59 |
Related
osv
osv
CVE-2023-30177
2023-04-25 18:15:09
Cross Site Scripting in CraftCMS
2023-04-25 18:30:23
cvelist
cvelist
CVE-2023-30177
2023-04-25 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-05-08 05:41:58
github
github
Cross Site Scripting in CraftCMS
2023-04-25 18:30:23
nvd
nvd
CVE-2023-30177
2023-04-25 18:15:09
prion
prion
Cross site scripting
2023-04-25 18:15:00
thn
thn
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.3%
Related for CVE-2023-30177