CVE-2023-3641

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.

• CWE-79

• https://vuldb.com/?ctiid.233887Third Party Advisory
• https://vuldb.com/?id.233887Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.233887Third Party Advisory
• https://vuldb.com/?id.233887Permissions Required, Third Party Advisory

Published

Jul 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36404Windows Kernel Information Disclosure Vulnerability5.5
• CVE-2023-36405Windows Kernel Elevation of Privilege Vulnerability7
• CVE-2023-36406Windows Hyper-V Information Disclosure Vulnerability5.5
• CVE-2023-36407Windows Hyper-V Elevation of Privilege Vulnerability7.8
• CVE-2023-36408Windows Hyper-V Elevation of Privilege Vulnerability7.8
• CVE-2023-36409Microsoft Edge (Chromium-based) Information Disclosure Vulne…6.5
• CVE-2023-36410Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vu…5.4
• CVE-2023-36413Microsoft Office Security Feature Bypass Vulnerability6.5
• CVE-2023-36414Azure Identity SDK Remote Code Execution Vulnerability8.8
• CVE-2023-36415Azure Identity SDK Remote Code Execution Vulnerability8.8
• CVE-2023-36416Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vu…6.1
• CVE-2023-36417Microsoft SQL OLE DB Remote Code Execution Vulnerability7.8