Lucene search
HistoryDec 25, 2023 - 8:15 a.m.
CVE-2023-38826
cross site scripting
follet learning solutions
handlewpesearchform.do
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
A Cross Site Scripting (XSS) vulnerability exists in Follet Learning Solutions Destiny through 20.0_1U. via the handlewpesearchform.do. searchString.
Affected configurations
Node
follettlearningsolutions_destinyRange≤20.0_1u
| Vendor | Product | Version | CPE |
|---|---|---|---|
| follettlearning | solutions_destiny | * | cpe:2.3:a:follettlearning:solutions_destiny:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-38826
2023-12-25 00:00:00
cve
cve
CVE-2023-38826
2023-12-25 08:15:07
prion
prion
Cross site scripting
2023-12-25 08:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2023-38826