CVE-2023-3641

MediumCVSS 4.3

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A vulnerability has been found in NodCMS 3.4.1 affecting an unknown functionality of the file /en/blog-comment-4 in the POST Request Handler component. Manipulation of the arguments comment_name/comment_content leads to cross site scripting.

Risk Assessment

An attacker can remotely exploit this vulnerability, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update NodCMS to the latest version and implement input data filtering to prevent XSS attacks.

Original NVD description (English source)

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.