al3zx/csz_cms_1_3_0_xss_in_install_page

al3zx/csz_cms_1_3_0_xss_in_install_page

GitHubGitHub
GitHubgithub.com
Releases0
XSS in install page in CSZ CMS 1.3.0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-41601↗
6.1 MEDIUM—

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.