CVE-2023-36223 | BDVDB-2026-206153 Detail

Description#

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/mlogclub/bbs-go
https://github.com/mlogclub/bbs-go/issues/208

Exploit#

No public exploit known

History#

Version 12023-07-03Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.