CVE Catalog
CVE-2023-37787
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.40%
31th percentile - higher than 31% of all known CVEs
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php.
Risk Assessment
Attackers can exploit these vulnerabilities to hijack user sessions or steal data, posing a serious security threat to the application.
Recommendation
It is recommended to upgrade to the latest version of Geeklog and implement proper input filtering and validation to minimize XSS risk.
Original NVD description (English source)
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php.