Lucene search

K
cvelistMitreCVELIST:CVE-2023-26847
HistoryApr 11, 2023 - 12:00 a.m.

CVE-2023-26847

2023-04-1100:00:00
mitre
www.cve.org
opencats
cross-site scripting
vulnerability
arbitrary execution
html
payload
candidates

0.001 Low

EPSS

Percentile

29.7%

A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates.

0.001 Low

EPSS

Percentile

29.7%

Related for CVELIST:CVE-2023-26847