CVE-2023-3554 in GZ Forum Script

सारांश

द्वारा MITRE • 10/07/2023

A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /preview.php. The manipulation of the argument catid/topicid/topic/topic_message/free_name leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233348. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• जिम्मेदार: VulDB
• आरक्षित करना: 08/07/2023
• प्रकटीकरण: 10/07/2023
• संयम: स्वीकृत
• प्रविष्टि: VDB-233348
• CPE: तैयार
• CWE: CWE-79 (पुष्टि की गई)
• CVSS: 6.1 (NVD)
• EPSS: 0.00485
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3554
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3554
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3554/