CVE-2023-5861

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

Affected

microweber · microweber/microweber

CVSS v3.1 NVD

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v3.0 HUNTR

6.4 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

EPSS

0.44% chance of exploitation in the next 30 days, 37th percentile

Published

2023-10-31

Updated

2024-09-05

Proof-of-concept exploits (1)

• https://huntr.com/bounties/7baecef8-6c59-42fc-bced-886c4929e220

Security advisories

• advisories/GHSA-7q5f-29gx-57ff
• microweber/microweber/commit/6ed7ebf1631dd8f0780caa4151a5538f3b227d26

References

• CVE Record
• NVD entry