CVE-2023-40786 - HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen

MEDIUM

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen

Published Sep 11, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.35%

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45338		Advisory
https://gitee.com/Hk_Cms/HkCms/issues/I7S3VC		ExploitIssue TrackingThird Party Advisory
https://www.hkcms.cn/index/index/uplogs.html		Release Notes

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 11, 2023

Updated Sep 26, 2024

Reserved Aug 22, 2023

CISA Vulnrichment

Updated Sep 26, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 11, 2023

Updated Sep 26, 2024

GitHub

No data