CVE-2023-43191

5.4 mediumEPSS 0.4%

Medium (5.4) in jrecms springbootcms. EPSS 0.4% chance of exploitation in the next 30 days.

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker, such as cookie theft

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jrecms:springbootcms

References

https://github.com/etn0tw/cmscve_test/blob/main/README.md
https://github.com/etn0tw/cmscve_test/blob/main/README.md

Check your stack JSON