CVE-2023-43871 - A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS)

MEDIUM

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS)

Published Sep 28, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.49%

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-48234		Advisory
https://github.com/sromanhu/CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media/blob/main/README.md		ExploitThird Party Advisory
https://github.com/sromanhu/WBCE-File-Upload--XSS---Media/blob/main/README.md		ExploitThird Party Advisory