CVE-2023-24230

Formwork v1.12.1 contains a stored XSS in the /formwork/panel/dashboard component, exploitable via the Page title field. Root cause is unsanitized input leading to script/HTML execution. CVSS 3.1 base score 4.8 (Medium) with PR:H, UI:R, scope Changed; impact on confidentiality/integrity is Low. A...