Lucene search
MitreCVE-2023-38911HistoryAug 18, 2023 - 7:15 p.m.
CVE-2023-38911
2023-08-1819:15:13
CWE-79
mitre
web.nvd.nist.gov
25
cve-2023-38911
cross-site scripting
xss
csz cms
arbitrary code execution
security vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
27.1%
A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.
Affected configurations
Node
cszcmscsz_cmsMatch1.3.0
Related
prion
prion
Cross site scripting
2023-08-18 19:15:00
cvelist
cvelist
CVE-2023-38911
2023-08-18 00:00:00
nvd
nvd
CVE-2023-38911
2023-08-18 19:15:13
zdt
zdt
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin Gallery) Vulnerability
2023-09-04 00:00:00
exploitdb
exploitdb
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
2023-09-04 00:00:00
packetstorm
packetstorm
CSZ CMS 1.3.0 Cross Site Scripting
2023-09-04 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
27.1%
Related for CVE-2023-38911