Lucene search

K
cveMitreCVE-2023-30256
HistoryMay 11, 2023 - 11:15 a.m.

CVE-2023-30256

2023-05-1111:15:09
CWE-79
mitre
web.nvd.nist.gov
22
cve-2023-30256
cross site scripting
webkil qloapps
nvd
security vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.011

Percentile

84.4%

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.

Affected configurations

Nvd
Node
webkulqloappsMatch1.5.2
VendorProductVersionCPE
webkulqloapps1.5.2cpe:2.3:a:webkul:qloapps:1.5.2:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.011

Percentile

84.4%