CVE-2023-3944 LOW

CVE-2023-3944: phpscriptpoint Lawyer page.php cross site scripting

Vendor Phpscriptpoint

Product Lawyer

Weakness CWE-79 · XSS

Published July 25, 2023

Last update October 15, 2024

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality of the file page.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235400. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

July 25, 2023 CVE published

October 15, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-3944 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-59767 Multiple vulnerabilities in AndSoft's e-TMS CVE-2024-13156 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter CVE-2026-27266 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-58631 WordPress IssueM Plugin <= 2.9.0 - Cross Site Scripting (XSS) Vulnerability CVE-2018-25065 Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scripting