CVE-2023-3827
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jul 22, 2023
Updated: May 17, 2024
CWE ID 319
Summary
CVE-2023-3827: A cross-site scripting (XSS) vulnerability was identified in the Bug Finder Listplace Directory Listing Platform 3.0. This issue affects an unspecified functionality of the /listplace/user/ticket/create file in the HTTP POST Request Handler component. Manipulation of the 'message' argument can lead to XSS attacks, which may be executed remotely. The VDB-235148 identifier was assigned to this vulnerability, and efforts to alert the vendor were unsuccessful.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- IBM Corporation