Lucene search
GoogleOSV:CVE-2023-44770HistoryOct 06, 2023 - 1:15 p.m.
CVE-2023-44770
2023-10-0613:15:13
Google
osv.dev
5
cross-site scripting
zenario cms
arbitrary code execution
organizer - spare alias
vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.2%
A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.
Related
cvelist
cvelist
CVE-2023-44770
2023-10-06 00:00:00
prion
prion
Cross site scripting
2023-10-06 13:15:00
nvd
nvd
CVE-2023-44770
2023-10-06 13:15:13
cve
cve
CVE-2023-44770
2023-10-06 13:15:13
veracode
veracode
Cross Site Scripting (XSS)
2023-10-10 07:11:51
osv
osv
Zenario CMS Cross-site Scripting vulnerability
2023-10-06 15:30:20
github
github
Zenario CMS Cross-site Scripting vulnerability
2023-10-06 15:30:20
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.2%
Related for OSV:CVE-2023-44770