Lucene search

MitreCVE-2023-46503

HistoryOct 27, 2023 - 4:15 a.m.

CVE-2023-46503

2023-10-2704:15:10

CWE-79

mitre

web.nvd.nist.gov

cve-2023-46503

cross site scripting

xss vulnerability

pwncyn yxbookcms

remote code execution

reader management

book input modules

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.8%

JSON

Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules.

Affected configurations

Nvd

Node

pwncynyxbookcmsMatch1.0.2

VendorProductVersionCPE
pwncynyxbookcms1.0.2cpe:2.3:a:pwncyn:yxbookcms:1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pwncyn	yxbookcms	1.0.2	cpe:2.3:a:pwncyn:yxbookcms:1.0.2:::::::*

References

github.com/PwnCYN/YXBOOKCMS/issues/2

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.8%

JSON

Related for CVE-2023-46503