CVE-2023-5689 HIGH

CVE-2023-5689: Cross-site Scripting (XSS) - DOM in modoboa/modoboa

Vendor Modoboa
Product modoboa/modoboa
Weakness CWE-79 · XSS
Published October 20, 2023
Last update September 11, 2024
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

Key dates

02Disclosure timeline

October 20, 2023 CVE published
September 11, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-24594 WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability CVE-2021-34759 Cisco Identity Services Engine Cross-Site Scripting Vulnerability CVE-2011-2920 Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution. CVE-2023-49847 WordPress Annual Archive Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS) CVE-2025-11866 Photographers galleries <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting