Lucene search

K
nvd[email protected]NVD:CVE-2023-46503
HistoryOct 27, 2023 - 4:15 a.m.

CVE-2023-46503

2023-10-2704:15:10
CWE-79
web.nvd.nist.gov
3
cve-2023-46503
cross site scripting
remote attacker
arbitrary code execution
reader management
book input

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.8%

Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules.

Affected configurations

Nvd
Node
pwncynyxbookcmsMatch1.0.2
VendorProductVersionCPE
pwncynyxbookcms1.0.2cpe:2.3:a:pwncyn:yxbookcms:1.0.2:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.8%

Related for NVD:CVE-2023-46503