What is CVE-2023-31862?

CVE-2023-31862 is a medium-severity vulnerability in Jizhicms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2023-05-19.

How severe is CVE-2023-31862?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Jizhicms

CVE-2023-31862

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the request package.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Jizhicms — versions 2.4.6
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2023-31862?: CVE-2023-31862 is a medium-severity vulnerability in Jizhicms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2023-05-19.
How severe is CVE-2023-31862?: Medium severity. CVSS v3 base score is 5.4 out of 10.