VULNERABILITY INTELLIGENCE

CVE-2023-45737

CVSS score5.4 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2023-12-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admin/markdown) page of GROWI versions prior to v3.5.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references