CVE-2023-5910

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component Web Config. The manipulation of the argument Site Title with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-244229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-59114.8The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could CVE-2023-59126.7A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileCVE-2023-59139.8Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated priCVE-2023-59146.1Cross-site scripting (XSS)CVE-2023-59155.3A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerabCVE-2023-59164.3A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save CVE-2023-59176.1A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the fileCVE-2023-59189.8A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown functioCVE-2023-59197.2A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown fuCVE-2023-59203.3Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to reaCVE-2023-59217.1Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: befCVE-2023-59227.5The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and R
CVE-2023-5910: Medium severity, CVSS 6.1 | Vulnix