CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting (XSS) when an authenticated user interacts with certain features on the admin panel.
References
Link Resource
https://www.exploit-db.com/exploits/51502 Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:cubiclesoft:barebones_cms:2.0.2:*:*:*:*:*:*:*

History

04 Aug 2023, 03:50

Type Values Removed Values Added
CPE cpe:2.3:a:cubiclesoft:barebones_cms:2.0.2:*:*:*:*:*:*:*
References (MISC) https://www.exploit-db.com/exploits/51502 - (MISC) https://www.exploit-db.com/exploits/51502 - Exploit, Third Party Advisory, VDB Entry
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.4
First Time Cubiclesoft
Cubiclesoft barebones Cms
CWE CWE-79

01 Aug 2023, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-01 17:15

Updated : 2023-08-04 03:50


NVD link : CVE-2023-36211

Mitre link : CVE-2023-36211


JSON object : View

Products Affected

cubiclesoft

  • barebones_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')