What is CVE-2022-4353?

CVE-2022-4353 is a low-severity vulnerability in Linzhaoguan Pb-Cms, classified under CWE-707. CVSS score: 3.5/10. Published 2022-12-08.

How severe is CVE-2022-4353?

Low severity. CVSS v3 base score is 3.5 out of 10.

XSS in Linzhaoguan Pb-Cms

CVE-2022-4353

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215113 was assigned to this vulnerability.

EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.

Affected products

Linzhaoguan Pb-cms — versions 2.0
Pb-cms_project Pb-cms — versions 2.0

Weakness classification (CWE)

References

cna@vuldb.com (Exploit, Third Party Advisory, Issue Tracking)
cna@vuldb.com (Third Party Advisory)

Frequently asked questions

What is CVE-2022-4353?: CVE-2022-4353 is a low-severity vulnerability in Linzhaoguan Pb-Cms, classified under CWE-707. CVSS score: 3.5/10. Published 2022-12-08.
How severe is CVE-2022-4353?: Low severity. CVSS v3 base score is 3.5 out of 10.