CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

ATTACKERKB•added 2023/12/30 11:15 p.m.•2 views

CVE-2023-52264

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

6.1CVSS5.8AI score0.0043EPSS

Exploits0References4

OSV•added 2023/12/30 11:15 p.m.•15 views

CVE-2023-52264

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

6.1CVSS6.1AI score

Exploits0References3

NVD•added 2023/12/30 11:15 p.m.•14 views

CVE-2023-52264

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

6.1CVSS0.0043EPSS

Exploits0References3

Prion•added 2023/12/30 11:15 p.m.•13 views

Cross site scripting

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

5.8CVSS6.3AI score0.0043EPSS

Exploits0References3Affected Software1

CVE•added 2023/12/30 12:0 a.m.•38 views

CVE-2023-52264

CVE-2023-52264 affects the Bees Blog component (beesblog) prior to version 1.6.2 used with thirty bees. The vulnerability is a Reflected XSS caused by mishandling of the sharing_url in controllers/front/post.php. Impact is reflected XSS; base CVSS 3.1 score 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

6.1CVSS6AI score0.0043EPSS

Exploits0References3Affected Software1