A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235054 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://seclists.org/fulldisclosure/2023/Jul/35 | Exploit Mailing List Third Party Advisory |
| https://vuldb.com/?ctiid.235054 | Third Party Advisory |
| https://vuldb.com/?id.235054 | Third Party Advisory |
| https://www.vulnerability-lab.com/get_content.php?id=2276 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Jul 2023, 15:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:tiva_events_calendar_project:tiva_events_calendar:1.4:*:*:*:*:php:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | (MISC) https://www.vulnerability-lab.com/get_content.php?id=2276 - Exploit, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.235054 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.235054 - Third Party Advisory | |
| References | (MISC) https://seclists.org/fulldisclosure/2023/Jul/35 - Exploit, Mailing List, Third Party Advisory |
20 Jul 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-20 15:15
Updated : 2024-05-17 02:27
NVD link : CVE-2023-3787
Mitre link : CVE-2023-3787
CVE.ORG link : CVE-2023-3787
JSON object : View
Products Affected
tiva_events_calendar_project
- tiva_events_calendar
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')