CVE-2023-47437

A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.47% chance of exploitation in the next 30 days, 39th percentile

Published

2023-11-27

Updated

2024-08-02

Proof-of-concept exploits (1)

• herombey/CVE-2023-474370★ · 2023-11-16

References

• CVE Record
• NVD entry

Related

• CVE-2023-47430
• CVE-2023-4744
• CVE-2023-4743
• CVE-2023-47445
• CVE-2023-4742
• CVE-2023-47446