CVE-2023-3563 - GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

Back Back to CVE browser

MEDIUM

GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

Published Jul 8, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.51%

Description

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was assigned to this vulnerability.

Affected products

Vendor GZ Scripts Product GZ E Learning Platform Default
n/a
- Version
  1.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GZ Scripts

GZ E Learning Platform

n/a

Version	Status	Constraints
1.8	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://vuldb.com/?ctiid.233357
signaturePermissions RequiredThird Party Advisory
https://vuldb.com/?id.233357
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://vuldb.com/?ctiid.233357		signaturePermissions RequiredThird Party Advisory
https://vuldb.com/?id.233357		vdb-entrytechnical-descriptionThird Party Advisory