CVE-2023-39097
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
WebBoss.io CMS version 3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
Risk Assessment
Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security risk to the application.
Recommendation
It is recommended to upgrade to the latest version of WebBoss.io CMS to mitigate this vulnerability.
Other vulnerabilities in WebBoss.io CMS v3.7.0.1
See all- CVE-2023-39096Medium
WebBoss.io CMS version 3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.
- CVE-2023-36339High
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.
- CVE-2023-37742Medium
WebBoss.io CMS before version 3.7.0.1 contains a reflected XSS vulnerability.
Original NVD description (English source)
WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS