Lucene search

MitreCVE-2023-49490

HistoryDec 11, 2023 - 9:15 p.m.

CVE-2023-49490

2023-12-1121:15:07

CWE-79

mitre

web.nvd.nist.gov

cve-2023-49490

xunruicms

xss

vulnerability

admin.php

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%

JSON

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php.

Affected configurations

Nvd

Node

xunruicmsxunruicmsMatch4.5.5

VendorProductVersionCPE
xunruicmsxunruicms4.5.5cpe:2.3:a:xunruicms:xunruicms:4.5.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xunruicms	xunruicms	4.5.5	cpe:2.3:a:xunruicms:xunruicms:4.5.5:::::::*

References

github.com/dayrui/xunruicms/issues/2

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-49490