CVE-2023-1609lowCWE-79

CVE-2023-1609: low-severity vulnerability in Zhong Bang CRMEB Java

Zhong Bang CRMEB Java save cross site scripting

Published · Updated

Follow this CVE+ Monitor CRMEB Java

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 0.5%
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/store/product/save. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223739.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
Zhong Bang · CRMEB Java
Related CVEs — Zhong Bang CRMEB Java

In the same product, most dangerous first.

CVE-2023-1165MEDIUMZhong Bang CRMEB Java list sql injectionEPSS 0.8%CVE-2023-1608MEDIUMZhong Bang CRMEB Java list getAdminList sql injectionEPSS 0.6%