CVE-2023-30338: XSS

Published Apr 27, 2023

Updated

Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters.

Affected Software

1 affected component

Emlog emlog=2.0.3

Remediation

Patch Available

https://github.com/emlog/emlog/issues/229

Event History

Apr 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-30338?

CVE-2023-30338 is a vulnerability that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters in Emlog Pro v2.0.3.

How severe is CVE-2023-30338?

CVE-2023-30338 has a severity score of 5.4, which is classified as medium severity.

How can I fix CVE-2023-30338?

To fix CVE-2023-30338, it is recommended to update your Emlog Pro installation to a version that is not affected by this vulnerability.

Is there a security advisory for CVE-2023-30338?

Yes, you can find more information about CVE-2023-30338 in the following security advisory: https://github.com/emlog/emlog/issues/229

What is the Common Weakness Enumeration (CWE) for CVE-2023-30338?

The Common Weakness Enumeration (CWE) for CVE-2023-30338 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').