CVE-2023-3980
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
CVE-2023-3980 involves a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository omeka/omeka-s prior to version 4.0.2.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade to version 4.0.2 or later to mitigate this vulnerability.
Other vulnerabilities in GitHub repository omeka/omeka-s
See all- CVE-2023-4561Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository omeka/omeka-s prior to version 4.0.4, allowing for the storage of malicious code.
- CVE-2023-4560Medium
Improper authorization of an index containing sensitive information exists in the GitHub repository omeka/omeka-s prior to version 4.0.4.
- CVE-2023-4159High
The GitHub repository omeka/omeka-s prior to version 4.0.3 has a vulnerability that allows unrestricted file uploads of dangerous types.
- CVE-2023-4158Medium
CVE-2023-4158 involves a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository omeka/omeka-s prior to version 4.0.3.
- CVE-2023-3982Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository omeka/omeka-s prior to version 4.0.2, allowing for the storage of malicious code.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS