CVE Feed

    Dashboard / CVE / CVE-2023-43873

    CVE-2023-43873

    A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu.

    Published:Sep 28, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 28, 2023
    EPSS Score:0.00225
    CVSS Score:5.4

    Affected Products

    Vendor
    E107
    Product
    E107 Cms

    Exploits

    https://github.com/sromanhu/e107-CMS-Stored-XSS---Manage/blob/main/README.mdhttps://github.com/sromanhu/e107-CMS-Stored-XSS---Manage/blob/main/README.mdhttps://github.com/sromanhu/CVE-2023-43873-e107-CMS-Stored-XSS---Manage

    Related CVEs

    CVE-2021-47937 (CVSS 8.7) — e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme insta…
    CVE-2022-50939 (CVSS 8.6) — e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators …
    CVE-2022-50916 (CVSS 8.7) — e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to overri…
    CVE-2022-50907 (CVSS 8.6) — e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to …
    CVE-2022-50906 (CVSS 4.8) — e107 CMS 3.2.1 contains an upload restriction bypass vulnerability that allows authenticated administrators to…
    CVE-2022-50905 (CVSS 9.8) — e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The fi…
    CVE-2025-11941 (CVSS 2.1) — A vulnerability was detected in e107 CMS up to 2.3.3. This impacts an unknown function of the file /e107_admin…
    CVE-2023-43874 (CVSS 5.4) — Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbit…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High