CVE-2023-47437

A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.47% chance of exploitation in the next 30 days, 40th percentile

Published

2023-11-27

Updated

2024-08-02

Proof-of-concept exploits (1)

• herombey/CVE-2023-474370★ · 2023-11-16

Security advisories

• pachno/pachno

References

• CVE Record
• NVD entry