CVE-2023-46504

2023-10-2700:00:00

mitre

github.com

cross site scripting

pwncyn yxbookcms

arbitrary code execution

general settings

AI Score

6.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component.

References

github.com/PwnCYN/YXBOOKCMS/issues/1