CVE-2023-26912

2023-03-1500:00:00

mitre

www.cve.org

cross site scripting

xenv s-mall-ssm

code execution

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.

References

github.com/xenv/S-mall-ssm/issues/37