Lucene search

[email protected]NVD:CVE-2023-43953

HistoryOct 03, 2023 - 9:15 p.m.

CVE-2023-43953

2023-10-0321:15:10

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-43953

cross-site scripting

content management

vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.6%

JSON

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.

Affected configurations

Nvd

Node

sscms_projectsscmsMatch7.2.2

VendorProductVersionCPE
sscms_projectsscms7.2.2cpe:2.3:a:sscms_project:sscms:7.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sscms_project	sscms	7.2.2	cpe:2.3:a:sscms_project:sscms:7.2.2:::::::*

References

github.com/M19O/Security-Advisories/tree/main/CVE-2023-43953