CVE-2023-3691

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handler. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.8.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-234237 was assigned to this vulnerability.

• CWE-79

• https://gitee.com/layui/layui/issues/I7HDXZExploit, Issue Tracking, Third Party Advisory
• https://gitee.com/layui/layui/tree/v2.8.0Product
• https://vuldb.com/?ctiid.234237Third Party Advisory
• https://vuldb.com/?id.234237Third Party Advisory
• https://gitee.com/layui/layui/issues/I7HDXZExploit, Issue Tracking, Third Party Advisory
• https://gitee.com/layui/layui/tree/v2.8.0Product
• https://vuldb.com/?ctiid.234237Third Party Advisory
• https://vuldb.com/?id.234237Third Party Advisory

Published

Jul 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36904Windows Cloud Files Mini Filter Driver Elevation of Privileg…7.8
• CVE-2023-36905Windows Wireless Wide Area Network Service (WwanSvc) Informa…7.5
• CVE-2023-36906Windows Cryptographic Services Information Disclosure Vulner…7.5
• CVE-2023-36907Windows Cryptographic Services Information Disclosure Vulner…7.5
• CVE-2023-36908Windows Hyper-V Information Disclosure Vulnerability6.5
• CVE-2023-36909Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabi…6.5
• CVE-2023-36910Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8
• CVE-2023-36911Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8
• CVE-2023-36912Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabi…7.5
• CVE-2023-36913Microsoft Message Queuing Information Disclosure Vulnerabili…7.5
• CVE-2023-36914Windows Smart Card Resource Management Server Security Featu…5.5
• CVE-2023-36915Multiple integer overflow vulnerabilities exist in the FST f…7.8