CVE-2023-38970

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function...

CVE-2023-38970

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function...

CVE-2023-38970

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function...

CVE-2023-38970

CVE-2023-38970 describes a Cross-Site Scripting vulnerability in Badaso (open-source Laravel/Vue CMS). Affects versions v0.0.1 through v2.9.7 in which a crafted payload to the Name of member parameter in the add new member function enables remote code execution. Root cause noted as insufficient s...