CVE-2023-3144: SourceCodester Online Discussion Forum Site manage_post.php cross site scripting
First published: Wed Jun 07 2023(Updated: )
A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\posts\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Discussion Forum Site | =1.0 | |
| Razormist Online Discussion Forum Site | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-3144?
CVE-2023-3144 is classified as a problematic vulnerability.
How do I fix CVE-2023-3144?
To mitigate CVE-2023-3144, sanitize user input in the title parameter of the manage_post.php file.
What type of vulnerability is CVE-2023-3144?
CVE-2023-3144 is identified as a cross-site scripting (XSS) vulnerability.
Which version of SourceCodester Online Discussion Forum Site is affected by CVE-2023-3144?
CVE-2023-3144 affects version 1.0 of SourceCodester Online Discussion Forum Site.
Where is the vulnerability in CVE-2023-3144 located?
The vulnerability in CVE-2023-3144 is located in the admin/posts/manage_post.php file.
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- vendor/online discussion forum site project
- canonical/sourcecodester online discussion forum site
- version/sourcecodester online discussion forum site/1.0
- vendor/razormist
- canonical/razormist online discussion forum site
- version/razormist online discussion forum site/1.0