Lucene search

K
cvelistMitreCVELIST:CVE-2023-31779
HistoryMay 22, 2023 - 12:00 a.m.

CVE-2023-31779

2023-05-2200:00:00
mitre
www.cve.org
2
wekan
cross site scripting
user privilege
kanban board
javascript
comment reaction

EPSS

0.001

Percentile

29.6%

Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in β€œReaction to comment” feature.

EPSS

0.001

Percentile

29.6%

Related for CVELIST:CVE-2023-31779