PT-2021-10823 · Unknown · Macrob7 Macs Framework Content Management System

Published 2021-10-22 · Updated 2021-10-27 · CVE-2020-23047

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System version 1.14f

Description The issue is related to a cross-site scripting (XSS) vulnerability found in the search input field of the search module. This allows for potential malicious script injection.

Recommendations For Macrob7 Macs Framework Content Management System version 1.14f, consider disabling the search module until a patch is available to prevent exploitation of the XSS vulnerability in the search input field.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-23047

Affected Products

Macrob7 Macs Framework Content Management System

References · 4

• 🔥 https://vulnerability-lab.com/get_content.php?id=2206 · Exploit
• https://osv.dev/vulnerability/CVE-2020-23047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23047 · Security Note
• https://t.me/cibsecurity/31068 · Telegram Post