github.com
https://github.com/leekenghwa/CVE-2023-46003 CVE-2023-46003
MEDIUM
Record summary
CVE-2023-46003 has a selected CVSS score of 5.4 (medium); EIP currently links 1 repository PoC.
Description
I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 11, 2024 · Source: CVE List
Proofs of concept
1Repository PoCs
GitHubleekenghwa/CVE-2023-46003Repository PoCby leekenghwaStars: 0Not analyzed1 file
References
5medium.com
https://medium.com/%40ray.999/stored-xss-in-i-doit-pro-25-and-below-cve-2023-46003-17fb8d6fe2e9 medium.com
https://medium.com/@ray.999/stored-xss-in-i-doit-pro-25-and-below-cve-2023-46003-17fb8d6fe2e9 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-46003 i-doit.com
https://www.i-doit.com/