What is CVE-2023-23753?

CVE-2023-23753 is a critical-severity vulnerability in Vi-Solutions Visforms, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-04-23.

How severe is CVE-2023-23753?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Vi-Solutions Visforms

CVE-2023-23753

The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it.

Vulnerability class: SQL Injection

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vi-solutions Visforms
Vi-solutions Visforms Base Package For Joomla 3 — versions 3.0.4, 3.0.5

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@joomla.org (vendor-advisory, Vendor Advisory)
security@joomla.org (Exploit, third-party-advisory)

Frequently asked questions

What is CVE-2023-23753?: CVE-2023-23753 is a critical-severity vulnerability in Vi-Solutions Visforms, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-04-23.
How severe is CVE-2023-23753?: Critical severity. CVSS v3 base score is 9.8 out of 10.