CVE-2023-54349
MEDIUMAmazCart CMS 3.4 Reflected Cross-Site Scripting via Search
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2023-54349. PoCs published by Sajibe Kanti.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in AmazCart CMS 3.4 by injecting a malicious script payload into the search bar, which executes when the search results are displayed. The PoC includes clear steps to reproduce the issue and confirms the vulnerability with a simple alert payload.
Description
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when search history is viewed or results are displayed.
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in AmazCart CMS 3.4 by injecting a malicious script payload into the search bar, which executes when the search results are displayed. The PoC includes clear steps to reproduce the issue and confirms the vulnerability with a simple alert payload.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N