CVE-2023-40627

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A reflected XSS vulnerability was discovered in the LivingWord component for Joomla.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
https://github.com/MLWebTechnologiesLivingWord component for Joomla1.0.0-3.0.0

References

Timeline

Published
Dec 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-406286.1A reflected XSS vulnerability was discovered in the Extplorer component for Joomla.CVE-2023-406299.8SQLi vulnerability in LMS Lite component for Joomla.CVE-2023-40635.3Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.CVE-2023-406309.8Unauthenticated LFI/SSRF in JCDashboards component for Joomla.CVE-2023-406314.4In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges neCVE-2023-406327.5In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execuCVE-2023-406335.5In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional executCVE-2023-406347.8In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execuCVE-2023-406357.8In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-406364.4In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead tCVE-2023-406375.5In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-406384.4In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privilege
CVE-2023-40627: Medium severity, CVSS 6.1 | Vulnix