Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-46054
HistoryOct 21, 2023 - 12:00 a.m.

CVE-2023-46054

2023-10-2100:00:00
mitre
github.com
cross site scripting
wbce cms
remote attacker
privilege escalation
crafted script
website_footer parameter

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.2%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.2%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-46054