VulnerabilityModified
CVE-2023-31816
IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scripting (XSS) via /ecodesource/search_list.php.
MEDIUM 6.1EPSS 0.46%
Does this matter?
Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.
Description
IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scripting (XSS) via /ecodesource/search_list.php.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.46% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- content management system project/content management system
- Source
- cve@mitre.org
References
- https://github.com/TzssZ/Content-Management-System-v1.0-has-Cross-site-Scripting-XSS-Exploit, Third Party Advisory
- https://github.com/TzssZ/Content-Management-System-v1.0-has-Cross-site-Scripting-XSS-Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.