CVE-2023-34637

CVE-2023-34637 is a stored XSS in IsarNet AG IsarFlow v5.23 that allows an authenticated attacker to inject arbitrary web scripts via the dashboard title parameter in the IsarFlow Portal. The vulnerability is described as CVSS v3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N with a base score of 5.4 (Me...