CVE-2023-7259

** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the component Adduser Page. The manipulation of the argument username with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated identifier of this vulnerability is VDB-266127. NOTE: The vendor rejected the issue because he claims that XSS which require administrative privileges are not of any use for attackers.

• CWE-79

• https://gitee.com/zzdevelop/lenosp/issues/I7XC2Y
• https://vuldb.com/?ctiid.266127
• https://vuldb.com/?id.266127
• https://gitee.com/zzdevelop/lenosp/issues/I7XC2Y
• https://vuldb.com/?ctiid.266127
• https://vuldb.com/?id.266127

Published

May 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7251Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2023-7252The Tickera WordPress plugin before 3.5.2.5 does not preven…5.3
• CVE-2023-7253The Import WP WordPress plugin before 2.13.1 does not preve…6.1
• CVE-2023-7255Rejected reason: Assigned as duplicate and no longer used.
• CVE-2023-7256In affected libpcap versions during the setup of a remote pa…4.4
• CVE-2023-7258A denial of service exists in Gvisor Sandbox where a bug in …6.5
• CVE-2023-7260Path Traversal vulnerability discovered in OpenText™ CX-E Vo…7.5
• CVE-2023-7261Inappropriate implementation in Google Updator prior to 1.3.…7.8
• CVE-2023-7263Some Huawei home music system products have a path traversal…7.3
• CVE-2023-7264The Build App Online plugin for WordPress is vulnerable to a…9.8
• CVE-2023-7265Permission verification vulnerability in the lock screen mod…6.2
• CVE-2023-7266Some Huawei home routers have a connection hijacking vulnera…8.1