CVE-2023-37742
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
WebBoss.io CMS before version 3.7.0.1 contains a reflected XSS vulnerability.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update WebBoss.io CMS to version 3.7.0.1 or later to mitigate this vulnerability.
Other vulnerabilities in WebBoss.io CMS
See all- CVE-2023-39097Medium
WebBoss.io CMS version 3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
- CVE-2023-39096Medium
WebBoss.io CMS version 3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.
- CVE-2023-36339High
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.
Original NVD description (English source)
WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS