CVE-2023-51252: XSS
Published Jan 10, 2024
·Updated
PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.
Affected Software
1 affected component
PublicCMS publiccms=4.0
Event History
Jan 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-51252?
CVE-2023-51252 is classified as a moderately severe Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2023-51252?
To fix CVE-2023-51252, ensure to validate and sanitize all uploaded files to prevent the execution of malicious code.
3
What types of files are exploited in CVE-2023-51252?
CVE-2023-51252 can be exploited through the upload of PDF and HTML files that contain malicious scripts.
4
Can CVE-2023-51252 be exploited remotely?
Yes, CVE-2023-51252 can be exploited remotely via the online preview function that processes uploaded files.
5
Which version of PublicCMS is affected by CVE-2023-51252?
CVE-2023-51252 affects PublicCMS version 4.0.