CVE-2023-5564

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-55655.4The Shortcode Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortmenu' shortcode in versions up to, and includCVE-2023-55665.4The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0CVE-2023-55675.4The QR Code Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'qrcodetag' shortcode in versions up to, and includingCVE-2023-55686.5A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to CVE-2023-55707.5Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. CVE-2023-55717.5Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0.CVE-2023-55729.8Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.CVE-2023-55736.5Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0.CVE-2023-55747.0A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-scCVE-2023-55756.5Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a loCVE-2023-55769.3The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includiCVE-2023-55775.4The Bitly's plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbitly' shortcode in all versions up to, an
CVE-2023-5564: Medium severity, CVSS 4.8 | Vulnix