Lucene search
HistoryNov 30, 2023 - 12:15 p.m.
CVE-2023-41136
cve-2023-41136
web page generation
cross-site scripting
stored xss
simple long form vulnerability
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.0%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Laurence/OhMyBox.Info Simple Long Form allows Stored XSS.This issue affects Simple Long Form: from n/a through 2.2.2.
Affected configurations
Node
ohmyboxsimple_long_formRange≤2.2.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ohmybox | simple_long_form | * | cpe:2.3:a:ohmybox:simple_long_form:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-11-30 12:15:00
cve
cve
CVE-2023-41136
2023-11-30 12:15:07
wpvulndb
wpvulndb
cvelist
cvelist
wordfence
wordfence
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.0%
Related for NVD:CVE-2023-41136