CVE-2023-42307 in Exam Form Submission

Sumário

de MITRE • 12/03/2024

Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 08/09/2023
• Divulgação: 12/03/2024
• Moderação: aceite
• Entrada: VDB-256614
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00413
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Energy, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-42307
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-42307
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-42307/