PT-2023-17211 · Unknown · Dreamer Cms

Xinca0 · Published 2023-03-30 · Updated 2025-04-04 · CVE-2023-1746

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dreamer CMS versions up to 3.5.0

Description A problematic issue was found in the File Upload Handler component, leading to cross site scripting. The manipulation can be launched remotely, affecting an unknown function.

Recommendations For Dreamer CMS versions up to 3.5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-1746

Affected Products

Dreamer Cms

References · 7

• 🔥 https://github.com/iteachyou-wjn/dreamer_cms/issues/11 · Exploit
• https://osv.dev/vulnerability/CVE-2023-1746 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1746 · Security Note
• https://t.me/cibsecurity/61220 · Telegram Post
• https://t.me/cvenotify/117773 · Telegram Post
• https://vuldb.com/?ctiid.224634 · Note
• https://vuldb.com/?id.224634 · Note