CVE-2023-3790

Summary

CVE-2023-3790 is a newly disclosed vulnerability in Boom CMS 8.0.7. This issue affects the function "add" within the "assets-manager" component, which can be exploited through manipulation of the title or description argument. The exploit allows for cross-site scripting attacks, which can be launched remotely. The vulnerability has been made public, increasing the risk of exploitation. The Vulnerability Database (VDB) has assigned identifier VDB-235057 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.