CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-54341

Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. The application does not sufficiently encode user-controlled inputs, allowing attackers to execute arbitrary JavaScript in victim's browsers by crafting malicious URLs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.5%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2023-54341

Webgrind Project » Webgrind » Version: 0.3

cpe:2.3:a:webgrind_project:webgrind:0.3
Webgrind Project » Webgrind » Version: 0.4

cpe:2.3:a:webgrind_project:webgrind:0.4
Webgrind Project » Webgrind » Version: 0.5

cpe:2.3:a:webgrind_project:webgrind:0.5
Webgrind Project » Webgrind » Version: 0.6

cpe:2.3:a:webgrind_project:webgrind:0.6
Webgrind Project » Webgrind » Version: 0.7

cpe:2.3:a:webgrind_project:webgrind:0.7
Webgrind Project » Webgrind » Version: 0.8

cpe:2.3:a:webgrind_project:webgrind:0.8
Webgrind Project » Webgrind » Version: 0.9

cpe:2.3:a:webgrind_project:webgrind:0.9
Webgrind Project » Webgrind » Version: 1.0

cpe:2.3:a:webgrind_project:webgrind:1.0
Webgrind Project » Webgrind » Version: 1.1

cpe:2.3:a:webgrind_project:webgrind:1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-54341

Products

Pricing

Contact Us