CVE-2023-43267: XSS
Published Oct 2, 2023
·Updated
A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.
Affected Software
1 affected component
Emlog emlog=2.1.14
Event History
Oct 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-43267?
CVE-2023-43267 is a cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14.
2
What is the impact of CVE-2023-43267?
CVE-2023-43267 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.
3
What software versions are affected by CVE-2023-43267?
Emlog Pro v2.1.14 is affected by CVE-2023-43267.
4
What is the severity of CVE-2023-43267?
CVE-2023-43267 has a severity score of 5.4, which is considered medium.
5
How can I mitigate CVE-2023-43267?
To mitigate CVE-2023-43267, update to a version of Emlog Pro that is not affected by this vulnerability.