CVSS 3.1 Score 5.9 of 10 (medium)


Published Sep 27, 2023
Updated: Sep 28, 2023


CVE-2023-40665 is a vulnerability categorized as a Secondary CyberVulnerability with a risk score of 26. It involves an Authorization (admin+) Stored Cross-Site Scripting (XSS) vulnerability in the Pdfcrowd Save as Image plugin by Pdfcrowd plugin, affecting versions <= 2.16.0. The vulnerability is related to CWE-79, which refers to the improper neutralization of input during web page generation (Cross-site Scripting). The base severity is classified as MEDIUM, with a base score of 5.9. It requires high privileges and user interaction over a network attack vector. The exploitability score is 1.7, and the impact score is 3.7, indicating a potential danger to organizations using the affected products. No remediation steps or specific danger details are provided in the available information from [email protected] source or other sources mentioned in the data provided for analysis.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40665 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options