CVE-2023-1536 HIGH

CVE-2023-1536: Cross-site Scripting (XSS) - Stored in answerdev/answer

Vendor Answerdev
Product answerdev/answer
Weakness CWE-79 · XSS
Published March 21, 2023
Last update February 27, 2025
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.

Key dates

02Disclosure timeline

March 21, 2023 CVE published
February 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-25901 Joomla! Core - [20260502] - XSS in com_associations CVE-2025-23563 WordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-51460 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-11289 westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting CVE-2025-34409 MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx