CVE-2023-27739

Monday, January 08, 2024

6.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

easyXDM 2.5 allows XSS via the xdm_e parameter.

Affected Software

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Weaknesses

n/a

ADP Enrichment

CVE Program Container

Additional References

https://threeshield.ca/easyxdm-2.5.20.html

CISA ADP Vulnrichment

SSVC:
Exploitation: poc
- Automatable: no
- Technical Impact: partial

References

https://threeshield.ca/easyxdm-2.5.20.html

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.