CVE-2023-3790

A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability.

• CWE-79

• https://seclists.org/fulldisclosure/2023/Jul/33Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235057Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235057Third Party Advisory
• https://www.vulnerability-lab.com/get_content.php?id=2274Exploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2023/Jul/33Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235057Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235057Third Party Advisory
• https://www.vulnerability-lab.com/get_content.php?id=2274Exploit, Third Party Advisory

Published

Jul 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37894Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-37895Java object deserialization issue in Jackrabbit webapp/stand…9.8
• CVE-2023-37896Nuclei is a vulnerability scanner. Prior to version 2.9.9, a…7.5
• CVE-2023-37897Grav is a file-based Web-platform built in PHP. Grav is subj…8.8
• CVE-2023-37898Joplin is a free, open source note taking and to-do applicat…5.4
• CVE-2023-37899Feathersjs is a framework for creating web APIs and real-tim…7.5
• CVE-2023-37900Crossplane is a framework for building cloud native control …2.7
• CVE-2023-37901Indico is an open source a general-purpose, web based event …5.4
• CVE-2023-37902Vyper is a Pythonic programming language that targets the Et…5.3
• CVE-2023-37903vm2 is an open source vm/sandbox for Node.js. In vm2 for ver…10
• CVE-2023-37904Discourse is an open source discussion platform. Prior to ve…3.1
• CVE-2023-37905ckeditor-wordcount-plugin is an open source WordCount Plugin…6.1