Lucene search
HistoryAug 22, 2023 - 7:16 p.m.
CVE-2023-39599
csz cms
xss
vulnerability
social settings
arbitrary code
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
26.9%
Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter.
Affected configurations
Node
cszcmscsz_cmsMatch1.3.0
Related
cve
cve
CVE-2023-39599
2023-08-22 19:16:39
prion
prion
Cross site scripting
2023-08-22 19:16:00
cvelist
cvelist
CVE-2023-39599
2023-08-22 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
26.9%
Related for NVD:CVE-2023-39599