CVE-2023-1527

Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2023-1527

creationtimestamp| type| source ---|---|--- 2023-03-21 06:34:36+00:00| seen| https://t.me/cibsecurity/60356 2025-02-27 17:25:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5728...

CVE-2023-1527

Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2023-1527 Cross-site Scripting (XSS) - Generic in tsolucio/corebos

Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2023-1527 Cross-site Scripting (XSS) - Generic in tsolucio/corebos

Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2023-1527 Cross-site Scripting (XSS) - Generic in tsolucio/corebos

Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2023-1527

CVE-2023-1527 describes a cross-site scripting (XSS) vulnerability in coreBOS (GitHub: tsolucio/corebos) prior to version 8.0. The issue is tied to the sanitization function vtlib_purify, which is reported to be insufficient: it strips HTML tags like script but allows with javascript: in href vi...