Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-3790 EUVD-2023-44423GHSA-x249-2ff2-v3ph

Boom CMS assets-manager add cross site scripting

Published Jul 20, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
Boom CMS 8.0.7 —

References