CVE-2023-5378CWE-79

Stored XSS in SmodBIP and MegaBIP

High · published January 29, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-01-29T11:11Z
EPSS history
Timeline
  • 29 JAN 11:11Z
    Stored XSS in SmodBIP and MegaBIP
    cvelistv5