CVE-2023-3563
Assigner: VulDB
Published: 2023-07-08T16:31:03.315Z
State: PUBLISHED
title: GZ Scripts GZ E Learning Platform URL Parameter cross site scripting
problemTypes: descriptions: type: CWE
cweId: CWE-79
description: CWE-79 Cross Site Scripting
affected: vendor: GZ Scripts
product: GZ E Learning Platform
versions: version: 1.8
status: affected
modules: URL Parameter Handler
descriptions: value: A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was assigned to this vulnerability.
value: Eine problematische Schwachstelle wurde in GZ Scripts GZ E Learning Platform 1.8 gefunden. Dies betrifft einen unbekannten Teil der Komponente URL Parameter Handler. Durch die Manipulation mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren.
metrics: cvssV3_1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
baseSeverity: LOW
cvssV3_0: version: 3.0
baseScore: 3.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
baseSeverity: LOW
cvssV2_0: version: 2.0
baseScore: 4
vectorString: AV:N/AC:L/Au:S/C:N/I:P/A:N
timeline: time: 2023-07-08T00:00:00.000Z
value: Advisory disclosed
time: 2023-07-08T00:00:00.000Z
value: CVE reserved
time: 2023-07-08T02:00:00.000Z
value: VulDB entry created
time: 2023-07-25T21:03:46.000Z
value: VulDB entry last update
credits: value: skalvin (VulDB User)
type: analyst