CVE-2023-5701

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Oct 23, 2023
Updated: May 17, 2024
CWE ID 79

Summary

CVE-2023-5701 is a newly disclosed vulnerability affecting the Markdown File Handler component in vnotex vnote versions up to 3.17.0. This issue is classified as problematic and permits remote cross-site scripting attacks. An attacker can manipulate inputs using the malicious code <xss onclick="alert(1)" style=display:block>Click here</xss> to execute malicious scripts on unsuspecting users. Despite early notification, the vendor has not responded to disclosure efforts, leaving users vulnerable to exploitation. The associated identifier for this vulnerability is VDB-243139.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share