PT-2023-26087 · Unknown · Webboss.Io Cms

Daten0Tst3X · Publicado 2023-07-21 · Atualizado 2023-07-27 · CVE-2023-37742

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WebBoss.io CMS versions prior to 3.7.0.1

Description A reflected cross-site scripting (XSS) issue was found in the software. This type of issue occurs when an application takes user input and sends it back to the user without proper validation or escaping, allowing an attacker to inject malicious scripts into the application.

Recommendations For versions prior to 3.7.0.1, update to version 3.7.0.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-37742

Produtos afetados

Webboss.Io Cms

Referências · 6

• https://t.me/cibsecurity/67104 · Publicação no Telegram
• https://webboss.io/page/bughunter-acknowledgments.html · Aviso do Fabricante
• https://webboss.feedbear.com/updates · Nota
• https://realinfosec.net/advisories/WEBBOSS-XSS-2022-0xd3fcf.html · Nota
• https://osv.dev/vulnerability/CVE-2023-37742 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37742 · Nota de Segurança