Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-43858
HistoryMay 31, 2023 - 12:00 a.m.

Kanboard Cross-Site Scripting Vulnerability (CNVD-2023-43858)

2023-05-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
kanboard
cross-site scripting
vulnerability
dom
clipboard

0.001 Low

EPSS

Percentile

35.4%

Kanboard is a suite of open source visual task board software. The software is able to customize the panels according to the business. A cross-site scripting vulnerability exists in Kanboard 1.2.28 and earlier versions, which stems from mishandling elements under the contentEditable element and can be exploited to inject arbitrary HTML markup into the DOM via maliciously crafted clipboard content.

CPENameOperatorVersion
kanboard kanboardle1.2.28

0.001 Low

EPSS

Percentile

35.4%