CVE-2023-3990
LowCVSS 3.5Exploitation Probability (EPSS)
Elevated risk68th percentile — higher than 68% of all known CVEs
Summary
A vulnerability has been found in Mingsoft MCMS up to version 5.3.1 that allows cross site scripting attacks through manipulation of the 'style' argument in the search.do file. The attack can be initiated remotely.
Risk Assessment
This vulnerability may lead to session hijacking and data theft. There is a risk of exploitation by third parties.
Recommendation
It is recommended to apply a patch to fix this vulnerability. Additionally, systems should be monitored for potential attacks.
Original NVD description (English source)
A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611.