Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2023-3641: khodakhah NodCMS POST Request blog-comment-4 cross site scripting
CVE-2023-3641 · published 3 years ago
Summary
A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site s...
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| nodcms | nodcms |
3.4.1 cpe:2.3:a:nodcms:nodcms:3.4.1:*:*:*:*:*:*:* |
Original advisory text
khodakhah NodCMS POST Request blog-comment-4 cross site scripting
A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.
References
- https://vuldb.com/?ctiid.233887 URL
- https://vuldb.com/?id.233887 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3641.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3641 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
4.3
Medium
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published12 Jul 2023
Updated4 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta