GitHub Advisoryadvisory · Maven

GHSA-3x3w-849q-423v Xnx3 Wangmarket Cross-Site Scripting vulnerability

MEDIUM Published 2023-12-17 Modified 2023-12-21 Official page ↗
Aliases
CVE-2023-6886
Ecosystem
Maven
Packages
com.xnx3.wangmarket:wangmarket
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-79
Reviewed
2023-12-21

Affected packages

• Maven com.xnx3.wangmarket:wangmarket: <= 6.1.0 (no fix yet)

Description

A vulnerability was found in xnx3 wangmarket 6.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Role Management Page. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248246 is the identifier assigned to this vulnerability.

Related

Alias · CVE (1)

  • CVE-2023-6886 A vulnerability was found in xnx3 wangmarket 6.1. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References