A cross-site scripting (XSS) vulnerability in the publish... · CVE-2023-43267 · GitHub Advisory Database · GitHub

A cross-site scripting (XSS) vulnerability in the publish...

Moderate severity Unreviewed Published Oct 2, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.

References

Published by the National Vulnerability Database

Oct 2, 2023

Published to the GitHub Advisory Database Oct 2, 2023

Last updated Apr 4, 2024

Severity

Moderate

5.4

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

Low

User interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N