GitHub Advisoryadvisory · Maven

GHSA-rxvj-5mv6-j5mc Cross-site Scripting in Mingsoft MCMS

LOW Published 2023-07-28 Modified 2023-07-28 Official page ↗
Aliases
CVE-2023-3990
Ecosystem
Maven
Packages
net.mingsoft:ms-mcms
Severity
Low
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-07-28

Affected packages

• Maven net.mingsoft:ms-mcms: < 5.3.2 → fixed in 5.3.2

Description

A Cross-site Scripting vulnerability has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611.

Related

Alias · CVE (1)

  • CVE-2023-3990 A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References