Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-48986
HistoryFeb 14, 2024 - 12:00 a.m.

CVE-2023-48986

2024-02-1400:00:00
mitre
github.com
2
cve-2023-48986
cross site scripting
cu solutions group
content management system
remote attacker
arbitrary code
escalate privileges
sensitive information
crafted script
users.php component

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-48986