CVE-2023-51252

Published Jan 10, 2024

Last updated 10 months ago

CVSS medium 5.4

Overview

Description: PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.4
Impact score: 2.7
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-79

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:publiccms:publiccms:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DA4CCE59-6A71-4BC4-86D4-3110B04C1082"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References