cbcvebase.
CVE-2023-5564
published 2023-10-13

CVE-2023-5564: Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1.

PriorityP419medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.38%
29.7th percentile
Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1.

Affected

3 ranges
VendorProductVersion rangeFixed in
froxlorfroxlor< 2.1.02.1.0
froxlorfroxlor>= 0 < 2.1.0-dev12.1.0-dev1
froxlorfroxlor_froxlor>= unspecified < 2.1.0-dev12.1.0-dev1

CVSS provenance

nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
nvdv3.05.2MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.