Lucene search

K
cveMitreCVE-2023-39097
HistoryAug 03, 2023 - 3:15 p.m.

CVE-2023-39097

2023-08-0315:15:29
CWE-79
mitre
web.nvd.nist.gov
20
cve-2023-39097
webboss.io
cms
xss
vulnerability
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.6%

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

Affected configurations

Nvd
Node
webbosswebboss.io_cmsMatch3.7.0.1
VendorProductVersionCPE
webbosswebboss.io_cms3.7.0.1cpe:2.3:a:webboss:webboss.io_cms:3.7.0.1:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.6%

Related for CVE-2023-39097