Cross site scripting

Cross-Site Scripting XSS vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information via fixed session identifiers SID in index.js file...

PT-2023-31574 · Unknown · Bill-Ahmed Qbit-Matui

Name of the Vulnerable Software and Affected Versions: bill-ahmed qbit-matUI version 1.16.4 Description: The issue is a Cross-Site Scripting XSS vulnerability that allows remote attackers to obtain sensitive information via fixed session identifiers SID in the index.js file. This vulnerability...

CVE-2023-50473

CVE-2023-50473 affects bill-ahmed qbit-matUI v1.16.4. The issue is a Cross-Site Scripting (XSS) vulnerability that allows remote attackers to obtain sensitive information via fixed session identifiers (SID) in the index.js file. Connected sources also indicate a remediation path: update to a newe...