CVE-2023-24081

2023-02-2100:00:00

mitre

www.cve.org

stored cross-site scripting

redrock software tutortrac

arbitrary web scripts

html injection

visits listing page

EPSS

0.001

Percentile

30.2%

JSON

Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and location fields of the visits listing page.