CVE-2023-3541: ThinuTech ThinuCMS author_posts.php cross site scripting

Published Jul 7, 2023

Updated

A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /authorposts.php. The manipulation of the argument author with the input g6g12<script>alert(1)</script>o8sdm leads to cross site scripting. The attack can be launched remotely. The identifier VDB-233293 was assigned to this vulnerability.

Affected Software

25 affected components

ThinuTech Thinu-cms=1.5

Apple WebKit

Microsoft Power Platform

Microsoft Azure Logic Apps

Microsoft Windows

Adobe Prelude

Adobe Illustrator

Adobe InDesign

Adobe Dimension

Adobe Experience Manager

Adobe Substance3D Stager

Adobe Substance3D Sampler

Adobe Substance3D After Effects

Adobe Substance3D Designer

Google Android

SAP Business Technology Platform (SAP BTP)

Atlassian Bamboo

Atlassian Bitbucket

Atlassian Jira

Atlassian Confluence Data Center

Atlassian Confluence Server

Cisco Apache Struts

VMware Workspace ONE Launcher

FortiGuard FortiOS

FortiGuard FortiPAM HTTPSd daemon

Event History

Jul 7, 2023

CVE Published

via MITRE·03:31 PM

Data Sourced

via MITRE·03:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Dec 13, 2023

News Published

12:41 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-3541.

What is the title of the vulnerability?

The title of the vulnerability is ThinuTech ThinuCMS author_posts.php cross site scripting.

What is the severity of CVE-2023-3541?

The severity of CVE-2023-3541 is medium with a severity value of 6.1.

What is the affected software?

The affected software is ThinuTech ThinuCMS 1.5.

How can I fix CVE-2023-3541?

To fix CVE-2023-3541, apply the latest update or patch provided by ThinuTech.