PT-2023-30259 · Jspxcms · Jspxcms

Published 2023-11-01 · Updated 2023-11-08 · CVE-2023-46911

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jspxcms version 10.2.0

Description There is a Cross Site Scripting (XSS) issue in the "choose style tree.do" interface of the backend. This affects the ability to securely interact with the system, potentially allowing malicious scripts to be executed.

Recommendations For Jspxcms version 10.2.0, consider disabling access to the "choose style tree.do" interface until a patch is available to prevent potential exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-46911

Affected Products

Jspxcms

References · 6

• 🔥 https://gitee.com/jspxcms/Jspxcms/issues/I8AK2H · Exploit
• https://osv.dev/vulnerability/CVE-2023-46911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46911 · Security Note
• https://t.me/latest_high_impact_cve/79 · Telegram Post
• https://t.me/cibsecurity/73345 · Telegram Post
• https://twitter.com/CVEnew/status/1719756612296900830 · Twitter Post