CVE-2023-53882
Last modified
CVE-2023-53882 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attackers to inject malicious scripts. Attackers can craft malicious links with XSS payloads to steal session tokens or execute arbitrary JavaScript in victims' browsers.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attackers to inject malicious scripts. Attackers can craft malicious links with XSS payloads to steal session tokens or execute arbitrary JavaScript in victims' browsers.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-53882?
How severe is CVE-2023-53882?
How do I fix CVE-2023-53882?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-53877Bus Reservation System 1.1 contains a SQL injection vulnerab…9.8
- CVE-2023-53878Member Login Script 3.3 contains a client-side desynchroniza…6.9
- CVE-2023-53879NVClient 5.0 contains a stack buffer overflow vulnerability …5.5
- CVE-2023-5388NSS was susceptible to a timing side-channel attack when per…6.5
- CVE-2023-53880Lucee 5.4.2.17 contains a reflected cross-site scripting vul…4.8
- CVE-2023-53881ReyeeOS 1.204.1614 contains an unencrypted CWMP communicatio…8.1
- CVE-2023-53883Webedition CMS v2.9.8.8 contains a remote code execution vul…7.2
- CVE-2023-53884Webedition CMS v2.9.8.8 contains a stored cross-site scripti…5.4
- CVE-2023-53885Webutler v3.2 contains a remote code execution vulnerability…7.2
- CVE-2023-53886Xlight FTP Server 3.9.3.6 contains a stack buffer overflow v…7.5
- CVE-2023-53887Zomplog 3.9 contains a cross-site scripting vulnerability th…5.4
- CVE-2023-53888Zomplog 3.9 contains a remote code execution vulnerability t…8.8
Are you affected by CVE-2023-53882?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST