medium5.4Public exploit code
CVE-2023-29983
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Companymaps v8.0 - Stored Cross Site Scripting (XSS)2023-05-02 · webapps · php
Impact
Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Companymaps Project | Companymaps | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/vogtmh/cmaps
- https://github.com/zPrototype/CVE-2023-29983
- https://packetstormsecurity.com/files/172075/CompanyMaps-8.0-Cross-Site-Scripting.html
- https://www.exploit-db.com/exploits/51417
- https://github.com/vogtmh/cmaps
- https://github.com/zPrototype/CVE-2023-29983
- https://packetstormsecurity.com/files/172075/CompanyMaps-8.0-Cross-Site-Scripting.html
- https://www.exploit-db.com/exploits/51417