Lucene search
Veracode Vulnerability DatabaseVERACODE:43725HistoryOct 10, 2023 - 3:42 p.m.
Cross Site Scripting
2023-10-1015:42:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
cross site scripting
arbitrary code execution
plural handle
data objects
system & settings
concrete5
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.4%
concrete5 is vulnerable to Cross Site Scripting (XSS). The attacker is able to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete5/concrete5 | le | 9.2.1 | |
| concrete5/concrete5 | le | 9.2.1 |
Related
cve
cve
CVE-2023-44765
2023-10-06 13:15:12
osv
osv
CVE-2023-44765
2023-10-06 13:15:12
ConcreteCMS Cross-site Scripting vulnerability
2023-10-06 15:30:19
prion
prion
Cross site scripting
2023-10-06 13:15:00
cvelist
cvelist
CVE-2023-44765
2023-10-06 00:00:00
nvd
nvd
CVE-2023-44765
2023-10-06 13:15:12
github
github
ConcreteCMS Cross-site Scripting vulnerability
2023-10-06 15:30:19
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.4%
Related for VERACODE:43725