CVE-2022-4640

Description

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.

Risk Information

Base Score

5.4

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.177

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-4640 are affected in Mingsoft-ms-mcms 5.2.9	Windows
Vulnerabilities CVE-2022-4640,CVE-2023-50578 are affected in Mingsoft-ms-mcms 5.2.9	Windows
Vulnerabilities CVE-2022-4640 are affected in Mingsoft-ms-mcms for Linux 5.2.9	Linux
Vulnerabilities CVE-2022-4640,CVE-2023-50578 are affected in Mingsoft-ms-mcms for Linux 5.2.9	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234