CVEvulnerability
CVE-2023-3787
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235054 is the identifier assigned to this vulnerability.
Affected configurations
• tiva events calendar project tiva events calendar 1.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://seclists.org/fulldisclosure/2023/Jul/35 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?ctiid.235054 Third Party Advisory
- https://vuldb.com/?id.235054 Third Party Advisory
- https://www.vulnerability-lab.com/get_content.php?id=2276 Exploit, Third Party Advisory
- https://seclists.org/fulldisclosure/2023/Jul/35 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?ctiid.235054 Third Party Advisory
- https://vuldb.com/?id.235054 Third Party Advisory
- https://www.vulnerability-lab.com/get_content.php?id=2276 Exploit, Third Party Advisory