CVE-2023-51252

{"id": "CVE-2023-51252", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2024-01-10T09:15:44.340", "references": [{"url": "https://github.com/sanluan/PublicCMS/issues/79", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing."}, {"lang": "es", "value": "PublicCMS 4.0 es vulnerable a Cross Site Scripting (XSS). Debido a que se pueden cargar archivos y se proporciona la funci\u00f3n de vista previa en l\u00ednea, se cargan archivos pdf y archivos html que contienen c\u00f3digo malicioso, y se crea una ventana emergente XSS a trav\u00e9s de la visualizaci\u00f3n en l\u00ednea."}], "lastModified": "2024-01-16T14:52:36.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:publiccms:publiccms:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA4CCE59-6A71-4BC4-86D4-3110B04C1082"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}