CVE-2023-3755

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /home/filter_listings. The manipulation of the argument price-range leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-234427. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
CreativeitemAtlas Business Directory Listing2.13

References

Timeline

Published
Jul 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-375506.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requestCVE-2023-375516.5In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requesCVE-2023-375526.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requestCVE-2023-375536.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requestCVE-2023-375546.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requestCVE-2023-375556.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requestCVE-2023-375566.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requestCVE-2023-375576.5After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests CVE-2023-375586.5After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requestsCVE-2023-375596.5After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requestsCVE-2023-37566.1A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is somCVE-2023-375606.1Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attack