Lucene search
MitreCVELIST:CVE-2023-38758HistoryAug 08, 2023 - 12:00 a.m.
CVE-2023-38758
2023-08-0800:00:00
mitre
www.cve.org
cross site scripting
wger project
workout manager
remote attacker
gain privileges
license author field
0.001 Low
EPSS
Percentile
20.4%
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components.
Related
cve
cve
CVE-2023-38758
2023-08-08 16:15:11
osv
osv
wger Workout Manager Cross-site Scripting vulnerability
2023-08-08 18:30:35
PYSEC-2023-143
2023-08-08 16:15:00
prion
prion
Cross site scripting
2023-08-08 16:15:00
github
github
wger Workout Manager Cross-site Scripting vulnerability
2023-08-08 18:30:35
nvd
nvd
CVE-2023-38758
2023-08-08 16:15:11