Lucene search
PRIOn knowledge basePRION:CVE-2023-6364HistoryDec 14, 2023 - 4:15 p.m.
Cross site scripting
2023-12-1416:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site scripting
stored xss vulnerability
whatsup gold
browser security
In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within a dashboard component.
If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| whatsup_gold | lt | 23.1.0 |
Related
cve
cve
CVE-2023-6364
2023-12-14 16:15:52
nvd
nvd
CVE-2023-6364
2023-12-14 16:15:52
cvelist
cvelist
CVE-2023-6364 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard
2023-12-14 16:04:40
nessus
nessus
Progress WhatsUp Gold < 23.1 Multiple Vulnerabilities
2023-12-22 00:00:00