CVE-2023-26599

2023-04-1900:00:00

mitre

www.cve.org

xss

triplesign

caveman 3.4.0

client-side code

EPSS

0.001

Percentile

32.3%

JSON

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.

References

tripleplay.tv

tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf

EPSS

0.001

Percentile

32.3%

JSON

Related for CVELIST:CVE-2023-26599