CVE-2023-3783
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk41th percentile — higher than 41% of all known CVEs
Summary
A vulnerability was found in Webile 1.0.1, classified as problematic. It affects an unknown function of the HTTP POST Request Handler component, where manipulation of the argument new_file_name/c leads to cross site scripting.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk to the application's security and user data.
Recommendation
It is recommended to update to the latest version of Webile and implement appropriate measures to protect against XSS attacks.
Original NVD description (English source)
A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235050 is the identifier assigned to this vulnerability.