CVE Catalog
CVE-2023-36217
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk1.39%
69th percentile - higher than 69% of all known CVEs
Summary
CVE-2023-36217 is a Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 that allows a remote attacker to execute arbitrary code via the category name field of the image manager function.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the application, potentially leading to data theft or malware.
Recommendation
It is recommended to update Xoops CMS to the latest version to mitigate this vulnerability and to monitor the application for unauthorized activities.
Original NVD description (English source)
Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function.