Mingsoft MCMS HTTP POST Request search.do cross site scripting
CVE-2023-3990

6.1MEDIUM

Key Information:

Vendor

Mingsoft

Status
MCMS
Vendor
CVE Published:
28 July 2023

What is CVE-2023-3990?

A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MCMS 5.3.0

MCMS 5.3.1

References

https://vuldb.com/?id.235611
vdb-entrytechnical-description
https://vuldb.com/?ctiid.235611
signaturepermissions-required
https://gitee.com/mingSoft/MCMS/issues/I7K4DQ
exploitissue-tracking

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VulDB Gitee Analyzer
JSON
.