CVE-2023-53887: Zomplog 3.9 Cross-Site Scripting Vulnerability via Page Creation
Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages. Attackers can craft malicious image source and onerror attributes to execute arbitrary JavaScript code in victim's browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53887?
CVE-2023-53887 is classified as a high severity vulnerability due to the potential for authenticated users to inject malicious scripts.
How do I fix CVE-2023-53887?
To fix CVE-2023-53887, apply the latest patch or update from Zomplog that addresses the cross-site scripting vulnerability.
Who is affected by CVE-2023-53887?
CVE-2023-53887 affects users of Zomplog version 3.9 and earlier who are able to create new pages.
What type of vulnerability is CVE-2023-53887?
CVE-2023-53887 is a cross-site scripting (XSS) vulnerability allowing the injection of malicious JavaScript code.
What can attackers do with CVE-2023-53887?
Attackers can exploit CVE-2023-53887 to execute arbitrary JavaScript in the browsers of victims by crafting malicious page content.