CVE-2023-47215

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Dec 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-472165.5in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources CVE-2023-472175.5in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.CVE-2023-472188.3An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co CVE-2023-472198.8A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject CVE-2023-47225.5Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-472206.6An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authen CVE-2023-472214.9A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administ CVE-2023-472229.8An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could CVE-2023-472234.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2.0 versions.CVE-2023-472247.5Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels CVE-2023-472255.4Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security L CVE-2023-472264.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 version