Lucene search
Veracode Vulnerability DatabaseVERACODE:40528HistoryMay 15, 2023 - 10:38 a.m.
Cross-Site Scripting (XSS)
2023-05-1510:38:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
craftcms
rss widget
vulnerability
javascript
software
0.001 Low
EPSS
Percentile
32.5%
craftcms/cms is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists in the RSS widget because of a malformed title which allows an attacker to inject and execute arbitrary JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| craftcms/cms | le | 3.8.3 | |
| craftcms/cms | le | 4.4.3 | |
| craftcms/cms | le | 3.8.3 | |
| craftcms/cms | le | 4.4.3 |
Related
osv
osv
craftcms/cms vulnerable to cross site scripting in RSS feed widget
2023-05-05 23:13:02
CVE-2023-31144
2023-05-09 16:15:14
prion
prion
Cross site scripting
2023-05-09 16:15:00
github
github
craftcms/cms vulnerable to cross site scripting in RSS feed widget
2023-05-05 23:13:02
cvelist
cvelist
cve
cve
CVE-2023-31144
2023-05-09 16:15:14
nvd
nvd
CVE-2023-31144
2023-05-09 16:15:14
thn
thn