CVE-2023-48858 - A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part

Back Back to CVE browser

MEDIUM

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part

Published Jan 17, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.52%

Description

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://abocms.ru/about/versions/version59/
Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52888
Advisory
https://github.com/Shumerez/CVE-2023-48858
ExploitThird Party Advisory

Link	Providers	Tags
https://abocms.ru/about/versions/version59/		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52888		Advisory
https://github.com/Shumerez/CVE-2023-48858		ExploitThird Party Advisory