CVE-2023-5582

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242147.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80

Affected software

Vendor	Product	Versions
n/a	ZZZCMS	2.2.0

References

https://github.com/Jacky-Y/vuls/blob/main/vul8.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.242147Permissions Required, Third Party Advisory
https://vuldb.com/?id.242147Third Party Advisory
https://github.com/Jacky-Y/vuls/blob/main/vul8.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.242147Permissions Required, Third Party Advisory
https://vuldb.com/?id.242147Third Party Advisory

Timeline

Published: Oct 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-55838.8The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserializatio CVE-2023-55856.1A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability aff CVE-2023-55867.8NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.CVE-2023-55879.8A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by CVE-2023-55885.3A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emoji.Pack of the file CVE-2023-55899.8A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulnerability affects unkn CVE-2023-55907.5NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.CVE-2023-55916.5SQL Injection in GitHub repository librenms/librenms prior to 23.10.0.CVE-2023-55927.5Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthent CVE-2023-55937.8The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated CVE-2023-55948.6Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using th CVE-2023-55955.5Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.