CVE-2023-3790
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk40th percentile — higher than 40% of all known CVEs
Summary
A vulnerability has been found in Boom CMS version 8.0.7 affecting the add function of the assets-manager component. Manipulation of the title/description arguments leads to cross site scripting attacks.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of application takeover and user data theft.
Recommendation
It is recommended to update Boom CMS to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability.