Lucene search

MitreCVE-2024-39203

HistoryJul 08, 2024 - 4:15 p.m.

CVE-2024-39203

2024-07-0816:15:08

CWE-79

mitre

web.nvd.nist.gov

cve-2024-39203

cross-site scripting

z-blogphp v1.7.3

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Affected configurations

Nvd

Node

zblogcnz-blogphpRange≤1.7.3.3230

VendorProductVersionCPE
zblogcnz-blogphp*cpe:2.3:a:zblogcn:z-blogphp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zblogcn	z-blogphp	*	cpe:2.3:a:zblogcn:z-blogphp::::::::

References

github.com/5r1an/CVE-2024-39203/issues/1

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

Related for CVE-2024-39203