CVE-2023-43342

Опубликовано: 19 окт. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.

Ссылки

https://github.com/sromanhu/CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Frontend
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend
Exploit
Product
Third Party Advisory
https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Frontend
Exploit
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opensolution:quick_cms:6.7:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00217

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-98q6-96hr-7jxp