CVE-2023-34835

2023-06-2700:00:00

mitre

www.cve.org

cross site scripting

microworld technologies

escan management

remote attacker

javascript code

cve-2023-34835

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete_file parameter.

References

github.com/sahiloj/CVE-2023-34835/blob/main/README.md