CVE-2023-43875: XSS
Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43875?
CVE-2023-43875 is a vulnerability that allows a local attacker to execute arbitrary web scripts in Subrion CMS v.4.2.1 through multiple Cross-Site Scripting (XSS) vulnerabilities.
How does CVE-2023-43875 affect Subrion CMS?
CVE-2023-43875 affects Subrion CMS v.4.2.1 through the injection of crafted payloads into the dbhost, dbname, dbuser, adminusername, and adminemail fields.
What is the severity of CVE-2023-43875?
The severity of CVE-2023-43875 is determined by the impact of the arbitrary web script execution, which can vary based on the attacker's intent.
How can I fix CVE-2023-43875 vulnerability in Subrion CMS?
To fix the CVE-2023-43875 vulnerability, you should update Subrion CMS to a version that includes the necessary security patches.
Where can I find more information about CVE-2023-43875?
You can find more information about CVE-2023-43875 on the National Vulnerability Database (NVD) website.