CVE-2023-41657

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Groundhogg Inc. HollerBox plugin = 2.3.2 versions...

PT-2023-28028 · Groundhogg · Hollerbox Plugin

Name of the Vulnerable Software and Affected Versions: Groundhogg Inc. HollerBox plugin versions = 2.3.2 Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access can inject malicious scripts...