CVE-2023-37153 in KodExplorer

Riassunto

di MITRE • 10/07/2023

KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 28/06/2023
• Divulgazione: 10/07/2023
• Moderazione: accettato
• Voce: VDB-233443
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.00725
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-37153
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-37153
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-37153/