PT-2023-26087 · Unknown · Webboss.Io Cms

Daten0Tst3X · Published 2023-07-21 · Updated 2023-07-27 · CVE-2023-37742

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WebBoss.io CMS versions prior to 3.7.0.1

Description A reflected cross-site scripting (XSS) issue was found in the software. This type of issue occurs when an application takes user input and sends it back to the user without proper validation or escaping, allowing an attacker to inject malicious scripts into the application.

Recommendations For versions prior to 3.7.0.1, update to version 3.7.0.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-37742

Affected Products

Webboss.Io Cms

References · 6

• https://webboss.io/page/bughunter-acknowledgments.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37742 · Security Note
• https://t.me/cibsecurity/67104 · Telegram Post
• https://webboss.feedbear.com/updates · Note
• https://realinfosec.net/advisories/WEBBOSS-XSS-2022-0xd3fcf.html · Note