CVE-2023-47663

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (CWE-80)

Published: Jun 4, 2024 / Updated: 5mo ago

010
CVSS 4.6EPSS 0.04%Medium
CVE info copied to clipboard

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through 1.7.5.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Timeline

CVE Assignment

NVD published the first details for CVE-2023-47663

Jun 4, 2024 at 10:15 AM
First Article

Feedly found the first article mentioning CVE-2023-47663. See article

Jun 4, 2024 at 10:24 AM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as MEDIUM

Jun 4, 2024 at 10:24 AM
EPSS

EPSS Score was set to: 0.04% (Percentile: 7.7%)

Jun 5, 2024 at 10:23 AM
Static CVE Timeline Graph

Attack Patterns

CAPEC-18: XSS Targeting Non-Script Elements
+null more

News

NA - CVE-2023-47663 - Improper Neutralization of Script-Related HTML...
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through 1.7.5.
CVE-2023-47663
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through 1.7.5. CVE-2023-47663 originally published on CyberSecurityBoard
CVE-2023-47663 | Menno Luitjes Foyer Plugin up to 1.7.5 on WordPress cross site scripting
A vulnerability has been found in Menno Luitjes Foyer Plugin up to 1.7.5 on WordPress and classified as problematic . Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2023-47663 . The attack can be launched remotely. There is no exploit available.
CVE-2023-47663 - Improper Neutralization of Script-Related HTML Tag
CVE ID : CVE-2023-47663 Published : June 4, 2024, 10:15 a.m. 16 minutes ago Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through 1.7.5. Severity: 4.6 MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2023-47663 WordPress Foyer plugin <=1.7.5 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Menno Luitjes Foyer allows Code Injection.This issue affects Foyer: from n/a through...
See 2 more articles and social media posts

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:Low
User Interaction:Required
Scope:Unchanged
Confidentiality:None
Integrity:Low
Availability Impact:Low

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI