PT-2023-25311

CVE-2023-35783

Published

2023-06-16

Updated

2023-06-26

Description by

CVSS 3.1

6.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ke search extension versions prior to 4.0.3 ke search extension versions 4.1.x through 4.6.x before 4.6.6 ke search extension versions 5.x before 5.0.2

Description The issue allows XSS via indexed data.

Recommendations For ke search extension versions prior to 4.0.3, update to version 4.0.3 or later. For ke search extension versions 4.1.x through 4.6.x, update to version 4.6.6 or later. For ke search extension versions 5.x, update to version 5.0.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Torben Hansen

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2023-35783