Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-36223
5.4
MEDIUMCVSS v3
Published
July 3, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.
mlogclub/bbs-go
GitHubA lightweight community and Q&A platform for forums, knowledge bases, and discussions.一个轻量级社区和问答平台。
GitHubA lightweight community and Q&A platform for forums, knowledge bases, and discussions.一个轻量级社区和问答平台。<= 3.5.5NVD