CVE-2023-0289

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-02904.3Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where tCVE-2023-02919.1The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated CVE-2023-02928.1The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This isCVE-2023-02934.3The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its ACVE-2023-02944.3The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.CVE-2023-02954.8The Launchpad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its settings parameters in versions up to, anCVE-2023-02965.3The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy compCVE-2023-02979.8Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.CVE-2023-02986.5Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.CVE-2023-02999.8Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.CVE-2023-03005.4Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.CVE-2023-03015.4Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.
CVE-2023-0289: Medium severity, CVSS 5.4 | Vulnix