CVE-2023-3563

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
GZ ScriptsGZ E Learning Platform1.8

References

Timeline

Published
Jul 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-356308.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-356317.8Win32k Elevation of Privilege VulnerabilityCVE-2023-356327.8Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2023-356337.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-356348.8Windows Bluetooth Driver Remote Code Execution VulnerabilityCVE-2023-356355.5Windows Kernel Denial of Service VulnerabilityCVE-2023-356366.5Microsoft Outlook Information Disclosure VulnerabilityCVE-2023-356387.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-356398.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2023-35646.1A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown funCVE-2023-356418.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-356426.5Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2023-3563: Medium severity, CVSS 6.1 | Vulnix