CVE-2023-5917

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file phpBB/includes/acp/acp_icons.php of the component Smiley Pack Handler. The manipulation of the argument pak leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.3.11 is able to address this issue. The patch is named ccf6e6c255d38692d72fcb613b113e6eaa240aac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-244307.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-59189.8A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown functioCVE-2023-59197.2A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown fuCVE-2023-59203.3Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to reaCVE-2023-59217.1Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: befCVE-2023-59227.5The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and RCVE-2023-59237.5A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of thCVE-2023-59247.5A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown codeCVE-2023-59257.5A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects somCVE-2023-59267.5A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown funcCVE-2023-59277.5A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerabilityCVE-2023-59287.5A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this issue is some unknCVE-2023-59297.5A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown pa
CVE-2023-5917: Medium severity, CVSS 6.1 | Vulnix