CVE-2023-39166

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 13, 2023

Updated: Dec 6, 2023

CWE ID 352

Summary

CVE-2023-39166 is a serious vulnerability affecting tagDiv Composer, where a Cross-Site Request Forgery (CSRF) weakness co-exists with Cross-Site Scripting (XSS). This combination allows attackers to execute malicious scripts in users' browsers who have previously interacted with a vulnerable application. The issue impacts tagDiv Composer versions prior to 4.4.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Tagdiv Composer

Affected Vendors

Tagdiv

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sHKzAe
https://www.cve.org/CVERecord?id=CVE-2023-39166
https://nvd.nist.gov/vuln/detail/CVE-2023-39166

Back to Vulnerability Database