Lucene search
HistorySep 28, 2023 - 3:15 p.m.
CVE-2023-43879
rite cms
xss
vulnerability
code execution
global content blocks
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
5.1 Medium
AI Score
Confidence
High
Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu.
CPE configuration
ritecmsritecmsMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ritecms:ritecms | ritecms | eq | 3.0 |
Related
prion
prion
Cross site scripting
2023-09-28 15:15:00
cvelist
cvelist
CVE-2023-43879
2023-09-28 00:00:00
nvd
nvd
NVD:CVE-2023-43879
2023-09-28 15:15:12
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
5.1 Medium
AI Score
Confidence
High
Related for CVE-2023-43879