Cross site scripting

2023-04-1912:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

triplesign

code injection

client-side

authenticated user

crafted link

nvd

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

JSON

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.

CPENameOperatorVersion
tripleplayeq3.4.0

CPE	Name	Operator	Version
	tripleplay	eq	3.4.0

References

tripleplay.tv

tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf