CVE-2023-5013

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-5013

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5013.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-5013

Published

2023-09-16T23:00:07.544Z

Modified

2026-07-15T01:49:17.282001181Z

Severity

2.6 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

Pluck CMS Installation install.php cross site scripting

Details

A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input <script>alert('xss')</script> leads to cross site scripting. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-239854 is the identifier assigned to this vulnerability.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5013.json",
    "cwe_ids": [
        "CWE-79"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.7.18"
                },
                {
                    "last_affected": "4.7.18"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/pluck-cms/pluck

Affected ranges

Type

GIT

Repo

https://github.com/pluck-cms/pluck

Events

Introduced

8611e20344ddc74c12855fd0a61b8000b56496be

Last affected

8611e20344ddc74c12855fd0a61b8000b56496be

Database specific

{
    "extracted_events": [
        {
            "introduced": "4.7.18-NA"
        },
        {
            "last_affected": "4.7.18-NA"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:pluck-cms:pluck:4.7.18:-:*:*:*:*:*:*"
}

Affected versions

4.*

4.7.18

4.7.18-NA

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5013.json"