Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-6366
HistoryDec 14, 2023 - 4:15 p.m.

Cross site scripting

2023-12-1416:15:00
PRIOn knowledge base
www.prio-n.com
6
whatsup gold
vulnerability
cross-site scripting
pre-2023.1
stored
attack
alert center
javascript

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within Alert Center.

If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.

CPENameOperatorVersion
whatsup_goldlt23.1.0

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for PRION:CVE-2023-6366