Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2023/10/18 10:15 p.m.•7 views

CVE-2023-45958

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the backuppagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload...

6.1CVSS6AI score0.00312EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/18 12:00 a.m.•54 views

CVE-2023-45958

CVE-2023-45958 affects Thirty Bees Core v1.4.0 with a reflected XSS via the backup_pagination parameter to /controller/AdminController.php, allowing arbitrary JavaScript execution in a user’s browser. Concrete details from multiple sources confirm the affected product/version and the vector; the ...

6.1CVSS6AI score0.00312EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•2 views

CVE-2023-45958: Improper Neutralization of Input During Web Page Generation

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the backuppagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload...

6.1CVSS6.5AI score0.00312EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/18 12:00 a.m.•11 views

CVE-2023-45958

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the backuppagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload...

6.4AI score0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder