CVE-2023-43267

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-432688.8Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability.CVE-2023-432699.8pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.CVE-2023-43275.5Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any loCVE-2023-432709.8dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate.CVE-2023-432719.1Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder throCVE-2023-432747.5Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.CVE-2023-432758.8Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers tCVE-2023-432788.8A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account.CVE-2023-432796.5Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewriCVE-2023-43285.5Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any lCVE-2023-432816.5Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbCVE-2023-432848.8D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary c
CVE-2023-43267: Medium severity, CVSS 5.4 | Vulnix