CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

ATTACKERKB•added 2023/05/29 7:15 a.m.•2 views

CVE-2023-2954

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

5.4CVSS5.9AI score0.00409EPSS

Exploits1References3

Vulnrichment•added 2023/05/29 12:0 a.m.•7 views

CVE-2023-2954 Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

4.8CVSS5.3AI score0.00409EPSS

Exploits1References2

CVE•added 2023/05/29 12:0 a.m.•48 views

CVE-2023-2954

CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....

5.4CVSS5.1AI score0.00409EPSS

Exploits1References2Affected Software1