{"id":"CVE-2023-3144","aliases":["EUVD-2023-43828","GHSA-4qrv-c52g-rjr6"],"status":"published","title":"SourceCodester Online Discussion Forum Site manage_post.php cross site scripting","description":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\\posts\\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00636,"percentile":0.50845,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2023-06-07T15:00:04Z","modified":"2026-06-17T06:13:26Z","products":[{"vendor":"razormist","product":"online_discussion_forum_site"},{"vendor":"sourcecodester","product":"online discussion forum site"}],"references":[{"url":"https://vuldb.com/?id.231013","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.231013","tags":["signature","permissions-required","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#10xss-vulnerability-in-adminpostsmanage_postphptitle","tags":["exploit","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3144"},{"url":"https://github.com/advisories/GHSA-4qrv-c52g-rjr6"}],"sources":{"cve":[{"id":"CVE-2023-3144","title":"SourceCodester Online Discussion Forum Site manage_post.php cross site scripting","description":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\\posts\\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.","status":"published","published":"2023-06-07T15:00:04.657Z","modified":"2024-08-02T06:48:07.68Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-43828","description":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\\posts\\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.","status":"published","published":"2023-06-07T15:00:04Z","modified":"2024-08-02T06:48:07Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T03:50:13.650706Z"}],"ghsa":[{"id":"GHSA-4qrv-c52g-rjr6","title":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum...","description":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\\posts\\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.","status":"published","published":"2023-06-07T15:30:18Z","modified":"2023-11-10T05:05:56Z","cvss":[{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:54:57.862055Z"}],"nvd":[{"id":"CVE-2023-3144","description":"A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\\posts\\manage_post.php. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231013 was assigned to this vulnerability.","status":"published","published":"2023-06-07T15:15:09.71Z","modified":"2026-06-17T06:13:26.997Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:08:05.329837Z"}]}}