QwikSec

Security Database

CVE

CWE

Training

CVE-2023-5378

Published: Jan 29, 2024

Modified: Jun 17, 2025

PUBLISHED

CVSS v3.1

8.8

HIGH

Description

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

Vendor	Product	Versions
Jan Syski	MegaBIP	affected `0 - <= 4.36.2` unaffected `5.08 - < *`
Jan Syski	SmodBIP	affected `0 - < *`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://megabip.pl/

product

https://smod.pl/

product

https://cert.pl/en/posts/2023/12/CVE-2023-5378

third-party-advisory

https://cert.pl/posts/2023/12/CVE-2023-5378

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.