Lucene search

K
cvelistMitreCVELIST:CVE-2023-25440
HistoryMay 23, 2023 - 12:00 a.m.

CVE-2023-25440

2023-05-2300:00:00
mitre
www.cve.org
stored cross site scripting
civicrm 5.59.alpha1
arbitrary code execution
contact function

0.001 Low

EPSS

Percentile

43.1%

Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.

0.001 Low

EPSS

Percentile

43.1%