CVE-2023-53155 - CVE House

Back to Database

Status published High CVE-2023-53155

goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the...

7.2 CVSS

Vulnerability Description

goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53155

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.exploit-db.com/exploits/51762

More from EmbedThis

View All →

CVE-2024-3187

This issue tracks two CWE-416 Use After Free (UAF) and...

Medium 5.9

CVE-2024-3186

CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of...

Medium 5.3

CVE-2024-3184

Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead...

Medium 5.9

Affected Vendor

EmbedThis

View all reports →

Affected Software

GoAhead

Vulnerable Versions:

2.5

Timeline

Official Publish: July 25th, 2025

Last Modified: July 29th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-79

MITRE ATT&CK TTPs

T1189 Drive-by Compromise

Initial Access

T1059.007 JavaScript

Execution

T1539 Steal Web Session Cookie

Collection

T1213 Data from Information Repositories