XOOPS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2023-36217 - Vulnerability Database

XOOPS

XOOPS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2023-36217

Critical

Reference: CVE-2023-36217

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-36217

Title: XOOPS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function.