CVE-2023-39710 in Inventory Management System

Tóm tắt

Bởi MITRE • 01/09/2023

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Đặt trước: 07/08/2023
• Tiết lộ: 01/09/2023
• Kiểm duyệt: được chấp nhận
• mục: VDB-238578
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 6.1 (NVD)
• EPSS: 0.00537
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-39710
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-39710
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-39710/