Lucene search

MitreVULNRICHMENT:CVE-2023-46467

HistoryOct 28, 2023 - 12:00 a.m.

CVE-2023-46467

2023-10-2800:00:00

mitre

github.com

cross site scripting

juzawebcms

remote attacker

arbitrary code

crafted payload

registration page

AI Score

7.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page.

References

www.sumor.top/index.php/archives/872/