CVE-2022-3853 - Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via CSRF

Back Back to CVE browser

MEDIUM

Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via CSRF

Published Dec 12, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.21%

Description

Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application.

Affected products

Vendor n/a Product Supra CSV Default
affected
- Version
  0
  Status
  affected
  Constraints
  <=4.0.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Supra CSV

affected

Version	Status	Constraints
0	affected	<=4.0.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43193
Advisory
https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514
exploitvdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43193		Advisory
https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514		exploitvdb-entrytechnical-descriptionThird Party Advisory