sromanhu/cve-2023-43873-e107-cms-stored-xss---managee107 2.3.2 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Name field in the Manage Menu.
Description: Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu.
Attack Vectors: Scripting A vulnerability in the sanitization of the entry in the Name of "Manage" allows injecting JavaScript code that will be executed when the user accesses the web page.
When logging into the panel, we will go to the "Manage" section off General Menu.
We edit that Site Settings that we have created and see that we can inject arbitrary Javascript code in the Name field.
### Additional Information:
https://e107.org/
https://owasp.org/Top10/es/A03_2021-Injection/
https://owasp.org/www-community/attacks/xss/