GHSA-7xqx-xwg9-jx34

Source

https://github.com/advisories/GHSA-7xqx-xwg9-jx34

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-7xqx-xwg9-jx34/GHSA-7xqx-xwg9-jx34.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-7xqx-xwg9-jx34

Aliases

CVE-2020-20697

Published

2023-06-20T15:31:08Z

Modified

2023-11-08T04:02:48Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

NodCMS Cross Site Scripting vulnerability

Details

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter.

Database specific

{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-06-21T22:10:00Z",
    "nvd_published_at":  "2023-06-20T15:15:10Z",
    "severity":  "MODERATE"
}

References

Affected packages

Packagist / khodakhah/nodcms

Package

Name: khodakhah/nodcms
Purl: pkg:composer/khodakhah/nodcms

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

3.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-7xqx-xwg9-jx34/GHSA-7xqx-xwg9-jx34.json"