GRN Software Group eVEWA3 Community Cross-Site Scripting Vulnerability

GRN Software Group eVEWA3 Community is a software application from GRN Software Group, Inc. to address management and billing issues on the Internet. A cross-site scripting vulnerability exists in GRN Software Group eVEWA3 Community versions 31 through 53, which stems from the presence of a...

CVE-2023-25295

CVE-2023-25295 describes a Cross Site Scripting (XSS) in GRUEN eVEWA3 Community, affecting versions 31 through 53, via the file evewa3ajax.php . The vulnerability allows an attacker to escalate privileges by sending a crafted request to the login panel. Reports consistently identify the vulnerabl...