CVE-2023-38904

2023-08-1600:00:00

mitre

www.cve.org

cross site scripting

netlify cms

remote attacker

arbitrary code

crafted payload

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

49.9%

JSON

A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function.

References

www.exploit-db.com/exploits/51576