CVE-2023-31862

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS)

Medium · published May 19, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the request package.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Published
2023-05-19T00:00Z
EPSS history
Timeline
  • 19 MAY 00:00Z
    jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS)
    cvelistv5