XSS in Hu60 Hu60wap6
CVE-2023-5835
A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named a1cd9f12d7687243bfcb7ce295665acb83b9174e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-243775.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Hu60 Hu60wap6
- Hu60t Hu60wap6 — versions n/a
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required)
- cna@vuldb.com (Patch, patch)
Frequently asked questions
- What is CVE-2023-5835?
- CVE-2023-5835 is a low-severity vulnerability in Hu60 Hu60wap6, classified under Cross-site Scripting. CVSS score: 3.5/10. Published 2023-10-28.
- How severe is CVE-2023-5835?
- Low severity. CVSS v3 base score is 3.5 out of 10.