CVE-2023-43874: XSS

Published Sep 28, 2023

Updated

Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in the Meta & Custom Tags Menu.

Affected Software

1 affected component

e107 E107 Cms=2.3.2

Event History

Sep 28, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-43874?

CVE-2023-43874 is a Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2.

How does CVE-2023-43874 affect e017 CMS?

CVE-2023-43874 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in the Meta & Custom Tags Menu of e017 CMS v.2.3.2.

What is the severity of CVE-2023-43874?

The severity of CVE-2023-43874 is medium, with a severity value of 5.4.

How can I fix CVE-2023-43874?

To fix CVE-2023-43874, it is recommended to upgrade e017 CMS to a version that is not affected by this vulnerability.

Where can I find more information about CVE-2023-43874?

You can find more information about CVE-2023-43874 at the following reference: https://github.com/sromanhu/e107-CMS-Stored-XSS---MetaCustomTags/blob/main/README.md