CVE-2023-3641

Name of the Vulnerable Software and Affected Versions khodakhah NodCMS version 3.4.1

Description A vulnerability has been found in the component POST Request Handler of the file /en/blog-comment-4. The manipulation of the comment name and comment content arguments leads to cross site scripting. The attack can be launched remotely.

Recommendations For khodakhah NodCMS version 3.4.1, consider disabling the functionality of the file /en/blog-comment-4 to prevent exploitation until a patch is available. Restrict access to the POST Request Handler component to minimize the risk of cross site scripting attacks. Avoid using the comment name and comment content arguments in the affected API endpoint until the issue is resolved.