Lucene search

K
cvelistMitreCVELIST:CVE-2023-30094
HistoryMay 04, 2023 - 12:00 a.m.

CVE-2023-30094

2023-05-0400:00:00
mitre
www.cve.org
stored cross-site scripting
arbitrary web scripts
html
crafted payload
platform name field
settings module

0.001 Low

EPSS

Percentile

36.2%

A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.

0.001 Low

EPSS

Percentile

36.2%

Related for CVELIST:CVE-2023-30094