Lucene search
MitreVULNRICHMENT:CVE-2023-45394HistoryOct 20, 2023 - 12:00 a.m.
CVE-2023-45394
2023-10-2000:00:00
mitre
github.com
2
xss
small crm
admin takeover
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
20.8%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the “Request a Quote” Section of Small CRM v3.0 allows an attacker to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.
Related
nvd
nvd
CVE-2023-45394
2023-10-20 04:15:10
prion
prion
Cross site scripting
2023-10-20 04:15:00
cve
cve
CVE-2023-45394
2023-10-20 04:15:10
cvelist
cvelist
CVE-2023-45394
2023-10-20 00:00:00
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
20.8%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-45394