CVE-2023-33961— Leantime Stored Cross-site Scripting Vulnerability
Quick assessment
Affected
Leantime leantime
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Leantime Systems Leantime是美国Leantime Systems公司的一套基于PHP和MySQL的开源项目管理系统。 Leantime 2.3.21及之后版本存在安全漏洞，该漏洞源于具有评论权限的户可以将恶意 Javascript 注入评论中，一旦用户将恶意评论加载到浏览器中，恶意 Javascript 代码就会执行。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-33961
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Leantime Stored Cross-site Scripting Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment. Once the malicious comment is loaded in the browser by a user, the malicious Javascript code executes. As of time of publication, a patch does not exist.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Leantime Systems Leantime 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Leantime Systems Leantime是美国Leantime Systems公司的一套基于PHP和MySQL的开源项目管理系统。 Leantime 2.3.21及之后版本存在安全漏洞，该漏洞源于具有评论权限的户可以将恶意 Javascript 注入评论中，一旦用户将恶意评论加载到浏览器中，恶意 Javascript 代码就会执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-33961
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-33961
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-33961 (1)
-
https://github.com/Leantime/leantime/security/advisories/GHSA-359m-fp6q-65r7 x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: leantime
-
CVE-2026-94211
Hyve5 Leantime Project Dashboard show.blade.php cross site s -
CVE-2026-94210
Hyve5 Leantime Kanban Board Tickets.php getAllGrouped cross -
CVE-2026-92772
Leantime before 3.9.6 Unauthorized Plugin Installation via H -
CVE-2026-54418
Leantime - Missing Authorization on TwoFA JSON-RPC Methods A -
CVE-2026-66416
Leantime CSRF Protection Globally Disabled by Omission of La
Same vendor: Leantime
-
CVE-2026-92772
Leantime before 3.9.6 Unauthorized Plugin Installation via H -
CVE-2026-76647
Leantime JSON-RPC API contains a missing authorization vulne -
CVE-2026-54418
Leantime - Missing Authorization on TwoFA JSON-RPC Methods A -
CVE-2026-66416
Leantime CSRF Protection Globally Disabled by Omission of La -
CVE-2026-66415
Leantime Server-Side Request Forgery and Local File Inclusio
Same weakness: CWE-79
-
CVE-2026-105291
feelec-yishu feelcrm-os Department Search Endpoint GroupCont -
CVE-2026-59788
Stored XSS vulnerability in OAuth configuration form -
CVE-2026-105289
feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFo -
CVE-2026-105288
feelec-yishu feelcrm-os Crm Endpoint functions.php index cro -
CVE-2026-102393
WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scr
V. Comments for CVE-2023-33961
No comments yet