CVE-2023-3641

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
khodakhahNodCMS3.4.1

References

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-364105.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-364136.5Microsoft Office Security Feature Bypass VulnerabilityCVE-2023-364148.8Azure Identity SDK Remote Code Execution VulnerabilityCVE-2023-364158.8Azure Identity SDK Remote Code Execution VulnerabilityCVE-2023-364166.1Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-364177.8Microsoft SQL OLE DB Remote Code Execution VulnerabilityCVE-2023-364187.8Azure RTOS GUIX Studio Remote Code Execution VulnerabilityCVE-2023-364199.8Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege VulnerabilityCVE-2023-36426.1A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown fuCVE-2023-364207.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-364227.8Microsoft Windows Defender Elevation of Privilege VulnerabilityCVE-2023-364238.8Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-3641: Medium severity, CVSS 6.1 | Vulnix