CVE-2023-31301

2023-12-2900:00:00

mitre

www.cve.org

stored xss

sesami cpto

remote attackers

arbitrary code

sensitive information

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

27.8%

JSON

Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.

References

herolab.usd.de/en/security-advisories/usd-2022-0059/