PT-2023-20480 · Unknown · Frp Form Answers

Tim Schreiner · Published 2023-02-26 · Updated 2023-03-07 · CVE-2023-26091

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions frp form answers extension versions prior to 3.1.2 frp form answers extension versions 4.x prior to 4.0.2

Description The issue allows XSS via saved emails.

Recommendations For frp form answers extension versions prior to 3.1.2, update to version 3.1.2 or later. For frp form answers extension versions 4.x prior to 4.0.2, update to version 4.0.2 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-26091

GHSA-Q3R2-23R8-WQR9

Affected Products

Frp Form Answers

References · 10

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/frappant/frp-form-answers/CVE-2023-26091.yaml · Exploit
• https://typo3.org/help/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q3r2-23r8-wqr9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-26091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26091 · Security Note
• https://typo3.org/security/advisory/typo3-ext-sa-2023-002 · Vendor Advisory
• https://github.com/frappant/frp_form_answers/commit/39fa16c8c792abdfc33e38bae17847364ff6a71d · Note
• https://github.com/frappant/frp_form_answers · Note
• https://t.me/cvenotify/45753 · Telegram Post
• https://t.me/cibsecurity/58904 · Telegram Post