CVE-2023-3563 LOW

CVE-2023-3563: GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

Vendor Gz Scripts
Product GZ E Learning Platform
Weakness CWE-79 · XSS
Published July 8, 2023
Last update November 21, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was assigned to this vulnerability.

Key dates

02Disclosure timeline

July 8, 2023 CVE published
November 21, 2024 Record updated