CVE-2023-1181: Cross-site Scripting (XSS) - Stored in icret/easyimages2.0
Published Mar 5, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.
Affected Software
1 affected component
Easyimages2.0 Project Easyimages2.0<2.6.7
Remediation
Event History
Mar 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-1181?
The severity of CVE-2023-1181 is classified as high due to its potential for exploitation through stored cross-site scripting.
2
How do I fix CVE-2023-1181?
To fix CVE-2023-1181, upgrade EasyImages2.0 to version 2.6.7 or later.
3
What impact does CVE-2023-1181 have on my application?
CVE-2023-1181 allows attackers to execute arbitrary scripts in the context of the user’s browser, potentially compromising user data.
4
Which versions of EasyImages2.0 are affected by CVE-2023-1181?
CVE-2023-1181 affects EasyImages2.0 versions prior to 2.6.7.
5
Is CVE-2023-1181 a widespread vulnerability?
CVE-2023-1181 is specific to the EasyImages2.0 project and may affect users of this software, but it is not considered a widespread vulnerability beyond this context.