OpenCATS Cross-Site Scripting Vulnerability (CNVD-2023-29368)

2023-04-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

opencats

cross-site scripting

vulnerability

applicant tracking system

recruiters

security

exploit

0.001 Low

EPSS

Percentile

29.7%

JSON

OpenCATS is a leading open source applicant tracking system for recruiters and companies. A security vulnerability exists in OpenCats v0.9.7. An attacker could use the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the state parameter of opencats/index.php?m=candidates.

CPENameOperatorVersion
opencats opencats veq0.9.7

CPE	Name	Operator	Version
	opencats opencats v	eq	0.9.7

0.001 Low

EPSS

Percentile

29.7%

JSON

Related for CNVD-2023-29368