Vulnerability CVE-2023-1111

Vulnerability Name:

CVE-2023-1111

Assigned:

2023-03-01

Published:

2024-05-24

Updated:

2026-06-17

Summary:

A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266126 is the identifier assigned to this vulnerability.

CVSS v40 Severity:

5.1 Medium (CCN CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Attack Requirements (AT): None Privileges Required (PR): High User Interaction (UI): None
Vulnerable System Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None
Subsequent System Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): None
Threat Metrics:	Exploit Maturity (E): Not_Defined

CVSS v3.x Severity:

4.8 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): Required
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

2.4 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

3.3 Low (CCN CVSS v2 Vector: AV:N/AC:L/Au:M/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Multiple_Instances
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-79

References:

Source: MITRE
Type: CNA
CVE-2023-1111

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Vulnerable Configuration:

Configuration 1:

cpe:2.3:a:xjd2020:fastcms:*:*:*:*:*:*:*:* (Version <= 0.1.5)

Denotes that component is vulnerable

BACK