CVE-2023-46499

2023-12-0800:00:00

mitre

www.cve.org

cross site scripting

evershop npm

admin panel

sensitive information

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel.

References

devhub.checkmarx.com/cve-details/cve-2023-46499/

devhub.checkmarx.com/cve-details/Cx0f8b38be-d5de/