Lucene search
HistoryJul 08, 2024 - 4:15 p.m.
CVE-2024-39203
z-blogphp
xss
vulnerability
backend theme management
arbitrary script execution
crafted payload
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.2%
A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Affected configurations
Node
zblogcnz-blogphpRange≤1.7.3.3230
References
Related
cve
cve
CVE-2024-39203
2024-07-08 16:15:08
cvelist
cvelist
CVE-2024-39203
2024-07-08 00:00:00
vulnrichment
vulnrichment
CVE-2024-39203
2024-07-08 00:00:00
osv
osv
CVE-2024-39203
2024-07-08 16:15:08
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.2%
Related for NVD:CVE-2024-39203