Vulnerability Description
Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. The application does not sufficiently encode user-controlled inputs, allowing attackers to execute arbitrary JavaScript in victim's browsers by crafting malicious URLs.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Webgrind Project | Webgrind | <= 1.1 |
Related Weaknesses (CWE)
References
- http://github.com/jokkedk/webgrind/Product
- https://www.exploit-db.com/exploits/51074Exploit
- https://www.vulncheck.com/advisories/webgrind-reflected-cross-site-scripting-xssThird Party Advisory
- https://www.exploit-db.com/exploits/51074Exploit
FAQ
What is CVE-2023-54341?
CVE-2023-54341 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. The application d...
How severe is CVE-2023-54341?
CVE-2023-54341 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-54341?
Check the references section above for vendor advisories and patch information. Affected products include: Webgrind Project Webgrind.