CVE-2023-37153 in KodExplorer

Resumen

por MITRE • 2023-07-10

KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 2023-06-28
• Divulgación: 2023-07-10
• Moderación: aceptado
• Artículo: VDB-233443
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00725
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-37153
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-37153
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-37153/