CVE-2023-26955

creationtimestamp| type| source ---|---|--- 2023-03-07 16:23:12+00:00| seen| https://t.me/cibsecurity/59560 2025-03-05 18:30:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6580...

CVE-2023-26955

Affected software: onekeyadmin v1.3.9. Vulnerability: stored cross-site scripting (XSS) via the Admin Group module. Root cause / nature: XSS flaw enabling injection in the Admin Group component, as reported across multiple sources. Impact (as stated): medium severity per CVSS 3.1 (Base score 5.4)...

CVE-2023-26955

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...