CVE-2023-5582

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242147.
References
Link Resource
https://github.com/Jacky-Y/vuls/blob/main/vul8.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.242147 Permissions Required Third Party Advisory
https://vuldb.com/?id.242147 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:zzzcms:zzzcms:2.2.0:*:*:*:*:*:*:*

History

29 Feb 2024, 01:42

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-14 14:15

Updated : 2024-05-17 02:33


NVD link : CVE-2023-5582

Mitre link : CVE-2023-5582

CVE.ORG link : CVE-2023-5582


JSON object : View

Products Affected

zzzcms

  • zzzcms
CWE
CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)