What is CVE-2023-43191?

CVE-2023-43191 is a medium-severity vulnerability in Jrecms Springbootcms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2023-09-27.

How severe is CVE-2023-43191?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2023-43191 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Jrecms Springbootcms

CVE-2023-43191

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker, such as cookie theft

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Jrecms Springbootcms — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-43191?: CVE-2023-43191 is a medium-severity vulnerability in Jrecms Springbootcms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2023-09-27.
How severe is CVE-2023-43191?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2023-43191 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.