Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-hr4y-q8gp-5ua5
Vulnerability ID VCID-hr4y-q8gp-5ua5
Aliases CVE-2023-0566
GHSA-w7w4-qjgg-372x
Summary Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-96 Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00304 https://api.first.org/data/v1/epss?cve=CVE-2023-0566
epss 0.00304 https://api.first.org/data/v1/epss?cve=CVE-2023-0566
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-w7w4-qjgg-372x
cvssv3.1 4.8 https://github.com/Froxlor/Froxlor
generic_textual MODERATE https://github.com/Froxlor/Froxlor
cvssv3.1 4.8 https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
cvssv3.1 6.2 https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
generic_textual MODERATE https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
ssvc Track* https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
cvssv3.1 4.8 https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
cvssv3.1 6.2 https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
generic_textual MODERATE https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
ssvc Track* https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
cvssv3.1 4.8 https://nvd.nist.gov/vuln/detail/CVE-2023-0566
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2023-0566
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-0566
https://github.com/Froxlor/Froxlor
https://nvd.nist.gov/vuln/detail/CVE-2023-0566
8339e4f1-d430-4845-81b5-36dd9fcdac49 https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
bd5b99dc1c06f594b9563d459a50bf3b32504876 https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
GHSA-w7w4-qjgg-372x https://github.com/advisories/GHSA-w7w4-qjgg-372x
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L Found at https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-28T15:44:01Z/ Found at https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L Found at https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-03-28T15:44:01Z/ Found at https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0566
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.5405
EPSS Score 0.00304
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:28:40.482825+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/0xxx/CVE-2023-0566.json 38.6.0