Cross-Site Scripting Vulnerability in a-blog CMS Versions by a-blog
CVE-2024-23183

5.4MEDIUM

Key Information:

Vendor: Appleple Inc.
Status: A-blog Cms Ver.3.1.x Series; A-blog Cms Ver.3.0.x Series; A-blog Cms Ver.2.11.x Series; A-blog Cms Ver.2.10.x Series
Vendor: CVE Published:; 23 January 2024

🔔 Create Appleple Inc. Vulnerability Alert

What is CVE-2024-23183?

A cross-site scripting vulnerability exists in multiple versions of a-blog CMS, where an authenticated remote attacker can exploit the flaw to execute arbitrary scripts in the context of a victim's browser session. This vulnerability affects the 3.1.x, 3.0.x, 2.11.x, 2.10.x, and earlier versions of the a-blog CMS, making it crucial for users to apply the necessary updates to mitigate potential security risks.

Affected Version(s)

a-blog cms Ver.2.9.0 and earlier

a-blog cms Ver.2.10.x series prior to Ver.2.10.50

a-blog cms Ver.2.11.x series prior to Ver.2.11.58

References

https://developer.a-blogcms.jp/blog/news/JVN-34565930.html

https://jvn.jp/en/jp/JVN34565930/

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 23, 2024
Vulnerability Reserved
Jan 12, 2024

CVE-2024-23183 Data

JSON