Cross Site Scripting Vulnerability in Typecho by Typecho
CVE-2023-27711

4.8MEDIUM

Key Information:

Vendor

Typecho

Status
Typecho
Vendor
CVE Published:
16 March 2023

What is CVE-2023-27711?

A Cross Site Scripting vulnerability in Typecho version 1.2.0 allows remote attackers to execute arbitrary code through the Comment Manager component located at /admin/manage-comments.php. Exploitation of this flaw could enable attackers to manipulate content and compromise user data, highlighting the importance of prompt updates and security measures.

References

https://github.com/typecho/typecho/issues/1539
https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backe...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.