CVE-2023-3827

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jul 22, 2023
Updated: May 17, 2024
CWE ID 319

Summary

CVE-2023-3827: A cross-site scripting (XSS) vulnerability was identified in the Bug Finder Listplace Directory Listing Platform 3.0. This issue affects an unspecified functionality of the /listplace/user/ticket/create file in the HTTP POST Request Handler component. Manipulation of the 'message' argument can lead to XSS attacks, which may be executed remotely. The VDB-235148 identifier was assigned to this vulnerability, and efforts to alert the vendor were unsuccessful.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share