CVE-2023-4090CWE-79

Cross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia

Medium · published October 4, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-10-04T11:02Z
EPSS history
Timeline
  • 04 OCT 11:02Z
    Cross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia
    cvelistv5