Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2023-23161 — Cross-site Scripting in ART Gallery Management System

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
6.1MEDIUMNVD
EPSS
2.7%
top 14.06%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Phpgurukul ART Gallery Management System
Timeline
PublishedFeb 10
Latest updateApr 3

Description

A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5fc7-wjrw-2jh4: A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1↗2023-02-10
▶
CVEList
CVE-2023-23161: A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1↗2023-02-10
▶

💥Exploits & PoCs

2
Exploit-DB
Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS)↗2023-04-03
▶
Nuclei
Art Gallery Management System Project v1.0 - Cross-Site Scripting
▶
CVE-2023-23161 — Cross-site Scripting | cvebase