VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Oct 24, 2023· Updated Jun 17, 2026

CVE-2023-46058

CVE-2023-46058

Description

Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the admin/group.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Geeklog/Geeklog2 versions
    cpe:2.3:a:geeklog:geeklog:2.2.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:geeklog:geeklog:2.2.2:*:*:*:*:*:*:*
    • (no CPE)range: =2.2.2
  • Geeklog-Core/geeklogdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.