CVE-2023-43872: XSS
Published Sep 28, 2023
·Updated
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
Affected Software
1 affected component
CMSmadesimple CMSmadesimple=2.2.18
Event History
Sep 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-43872?
CVE-2023-43872 is a file upload vulnerability in CMSmadesimple v.2.2.18 that allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
2
How severe is the vulnerability CVE-2023-43872?
The severity of the vulnerability CVE-2023-43872 is medium with a CVSS score of 5.4.
3
What software is affected by CVE-2023-43872?
The CMSmadesimple version 2.2.18 is affected by CVE-2023-43872.
4
How can an attacker exploit CVE-2023-43872?
An attacker can exploit CVE-2023-43872 by uploading a malicious pdf file with hidden XSS.
5
Is there a fix for CVE-2023-43872?
Yes, updating the CMSmadesimple software to a version that is not affected by the vulnerability will fix CVE-2023-43872.