CVE-2023-24733
MEDIUM EXPLOITED NUCLEIPMB v7.4.6 - XSS
Title source: llmDescription
PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950_new.php.
Nuclei Templates (1)
PMB 7.4.6 - Cross-Site Scripting
MEDIUMVERIFIEDby r3Y3r53
Shodan:
http.favicon.hash:1469328760 || http.html:"pmb group"
FOFA:
body="pmb group" || icon_hash=1469328760
Scores
CVSS v3
6.1
EPSS
0.1492
EPSS Percentile
94.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
VulnCheck KEV
2025-09-14
CWE
CWE-79
Status
published
Products (1)
sigb/pmb
7.4.6
Published
Mar 06, 2023
Tracked Since
Feb 18, 2026