{"id":"CVE-2023-5378","aliases":["EUVD-2023-57694","GHSA-9w3h-593p-q56r"],"status":"published","title":"Stored XSS in SmodBIP and MegaBIP","description":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00527,"percentile":0.44932,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-79"],"published":"2024-01-29T11:11:11Z","modified":"2026-06-17T06:48:27Z","products":[{"vendor":"jan syski","product":"megabip"},{"vendor":"jan syski","product":"smodbip"},{"vendor":"megabip","product":"megabip"},{"vendor":"smod","product":"smodbip"}],"references":[{"url":"https://megabip.pl/","tags":["product","x_transferred","Product"]},{"url":"https://smod.pl/","tags":["product","x_transferred","Product"]},{"url":"https://cert.pl/en/posts/2023/12/CVE-2023-5378","tags":["third-party-advisory","x_transferred","Third Party Advisory"]},{"url":"https://cert.pl/posts/2023/12/CVE-2023-5378","tags":["third-party-advisory","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5378"},{"url":"https://megabip.pl"},{"url":"https://smod.pl"},{"url":"https://github.com/advisories/GHSA-9w3h-593p-q56r"}],"sources":{"cve":[{"id":"CVE-2023-5378","title":"Stored XSS in SmodBIP and MegaBIP","description":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.","status":"published","published":"2024-01-29T11:11:11.608Z","modified":"2025-06-17T21:29:17.036Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57694","description":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.","status":"published","published":"2024-01-29T11:11:11Z","modified":"2025-06-17T21:29:17Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:20.512078Z"}],"ghsa":[{"id":"GHSA-9w3h-593p-q56r","title":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software...","description":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2 (newer versions were not tested; the vendor has not confirmed fixing the vulnerability). \n\n\n","status":"published","published":"2024-01-29T12:30:20Z","modified":"2024-02-28T05:08:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20","CWE-79"],"updated_at":"2026-11-02T14:55:38.39087Z"}],"nvd":[{"id":"CVE-2023-5378","description":"Improper Input Validation vulnerability in  MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.","status":"published","published":"2024-01-29T12:15:07.86Z","modified":"2026-06-17T06:48:27.9Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:01.900189Z"}]}}