CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2023/12/14 1:15 a.m.•23 views

Cross site scripting

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

6.8CVSS6.4AI score0.49362EPSS

Exploits1References1Affected Software1

OSV•added 2023/12/14 12:0 a.m.•24 views

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

9.6CVSS6.2AI score0.49362EPSS

Exploits1References3

CVE•added 2023/12/14 12:0 a.m.•40 views

CVE-2023-31546

Consolidated details show: Affected product is DedeBIZ v6.0.3. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the search feature , allowing an attacker to run arbitrary code in the context of a user session. Root cause identified as improper handling of input in the search...

9.6CVSS8.4AI score0.49362EPSS

Exploits1References1Affected Software1